last executing test programs: 2.538440407s ago: executing program 0 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000014}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbf9, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x52}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x840) unshare(0x400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x9, 0x0, 0x12, 0x10, 0x2, 0x5, 0x2, 0xf, 0x2, 0x4, 0x5, 0x7, 0x9, 0x10, 0xc], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd07, 0xd, 0x2, 0xb, 0x3, 0x5, 0x9, 0xd, 0x8001], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x4, 0xc, 0x40, 0xfffc, 0x4, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r14 = socket$inet_tcp(0x2, 0x1, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="02002cbd7000ffdbfda9b7452c9c845ed9df", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x8000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newrule={0x60, 0x20, 0x420, 0x70bd2a, 0x1c00000, {0xa, 0x94, 0x0, 0x6, 0x7, 0x0, 0x0, 0x3, 0x7}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}, @FRA_DST={0x14, 0x1, @private0}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x34, &(0x7f00000000c0)=r13, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 2.323543194s ago: executing program 0 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.305819165s ago: executing program 2 (id=2635): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket(0x40000000015, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400000000e400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.247370403s ago: executing program 0 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r2, 0xfff) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r6, 0x1}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) 1.937403446s ago: executing program 2 (id=2644): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 1.925721861s ago: executing program 0 (id=2645): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl(r2, 0x16e, &(0x7f00000002c0)="4e0d67b18b0d30825ad265282c4f924de33850e82863b05d857f001df0a34bdd72feae7cc829beb4f397b98e53d3576e") sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.429684762s ago: executing program 4 (id=2649): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = accept$netrom(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x200}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002c492c66367e0754bbed1cbd700000000000020000000803030058d5f62d628de3982fe8e90c9144f76e90a0070aa63196f04d15e745d7f908a4d09f0ea2775a60fa111cbb9c64d883a5b4557c87f61f02c338db822d42f81ee608e23d141bf70c3320a41c195f646fd183aaabbbd5d69661394e8bd3fe8c17e3450adc0779389c07df65a3e0d0", @ANYRES32=0x0, @ANYBLOB="0c0099000200000025000000080026006c0900000800a0000400000008009f0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48957}, 0xc041) close(0x4) 1.168992482s ago: executing program 2 (id=2651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) connect$rds(r4, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01032bbd7000fedbdf251c00000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x90) pselect6(0x40, &(0x7f0000001040)={0x1ff, 0x3, 0x4, 0x81, 0x2, 0x81, 0x9, 0x5}, &(0x7f00000010c0)={0xa, 0x2000000000, 0x1, 0x4, 0x400, 0x4, 0x0, 0x8}, &(0x7f0000001100)={0x3, 0x8, 0x50, 0x5, 0x5, 0x4, 0x101}, &(0x7f0000001140)={0x77359400}, &(0x7f00000011c0)={0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001180)={'dummy0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x258, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x228, 0x2, [@TCA_FLOW_EMATCHES={0x224, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xe0, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1821e3", @TCF_META_TYPE_VAR='[', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x47, 0x2}, {0x8, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x20, 0x1}, {0x8000, 0x5b, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7f, 0x2}, {0x532, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x10}, {0x3, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1a6dd65b"]}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_VAR="85baeef04fc110743bed", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="daf1c48d69851eb33b", @TCF_META_TYPE_VAR="14a35ff5", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="7f4248", @TCF_META_TYPE_VAR='bK', @TCF_META_TYPE_VAR='g!-a', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="adbe5d85", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ad411ded7c38a0"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3ff, 0x8, 0x5}, {0x1, 0x1, 0x52414e4c50aa5067}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x401, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="4f616e52bf4185db", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9b35b8c0b1633d95e7", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x4, 0x1}, {0x6d2, 0x0, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0xa59}, {0x7ff, 0xa, 0x6dd358a5, 0x10001}}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="84", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="6bcd", @TCF_META_TYPE_VAR="60737fd7c3ea25a390ce"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b2070f97", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='\a', @TCF_META_TYPE_VAR='Hw', @TCF_META_TYPE_VAR="6a983eb1851a"]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="b0a651a561c4d963", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f5b7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="220d17b290", @TCF_META_TYPE_VAR="8a1ba36d33", @TCF_META_TYPE_VAR="a3b7422b707675"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf7d5, 0x2}, {0x8cb, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="d4ff08c746c8ddc36a09", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e8d197", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8960b555", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xa, 0x9, 0x100}}}]}]}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000001300)=""/4093, &(0x7f0000001080)=0xffd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a001000fd00c8070000000014000500fc0000000000000000000000000000000c00090008001080", @ANYRES32=0x0, @ANYBLOB="2645a7d8ef95d75aef71f6bec3e5bee624b30712a8f0968c2f17247bb9926009263f5a6ae49b5843e995e2322fa1a99b9a62c53d2fbcf86c396bcf6e9d68acf8f98d19cf140a7f5d6378020ec580dc79e3fc8bb9c429e901dddc19"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) 1.027812069s ago: executing program 3 (id=2654): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES8=r1], 0x20}], 0x1}, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x1d, 0x1, 0x70bd28, 0x10000000}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x1d, 0x1, 0x70bd28, 0x10000000}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) ioctl$FIOCLEX(r0, 0x5451) 936.971947ms ago: executing program 0 (id=2656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x140c, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040044}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0xffffff31, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1baba61100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 892.490728ms ago: executing program 4 (id=2657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r1, 0x0, 0x0, 0x840) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 884.330654ms ago: executing program 3 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xf5}}], 0x40001b6, 0x0) 817.603852ms ago: executing program 1 (id=2659): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c020044800400480012800b0001006970366772650000380002800400120008000100", @ANYRES32, @ANYBLOB="14000700000000000000000000000000000000bb14000600200100"/38], 0x68}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) 776.450061ms ago: executing program 4 (id=2660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc, 0x0, {0x20}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 666.40378ms ago: executing program 1 (id=2661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1, 0x28001, 0x80) sendfile(r3, r0, 0x0, 0xf03a0005) 608.75132ms ago: executing program 3 (id=2662): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f0000001700)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac0000001800dd8d0000000000000000020000000000fd0500000000880016"], 0xac}}, 0x20000000) 586.380027ms ago: executing program 2 (id=2663): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 568.169228ms ago: executing program 4 (id=2664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040894}, 0x4800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '/\\+.+\xc1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c804}, 0x40) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c80c0}, 0x20000040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000940)=0x40, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x80000}, 0x840) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r11, 0x0, 0x24, &(0x7f0000000b40)={@loopback, @loopback}, 0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r12, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20500020}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r13, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24048080) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f2, 0x100, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf99}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xf7d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0c1}, 0xfda6bb5ce2810f0f) 464.930296ms ago: executing program 1 (id=2665): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 464.383818ms ago: executing program 3 (id=2666): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x102}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x102}}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x258}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 377.907248ms ago: executing program 1 (id=2667): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a010102080009000300000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 377.132669ms ago: executing program 4 (id=2668): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x200}, @val={0x0, 0x0, 0x11, 0x0, 0xffff}, @mpls={[], @generic="594c973a09555d95f4b9404631a6b2cd8c"}}, 0x1f) 365.161214ms ago: executing program 3 (id=2669): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0], {0x95, 0x0, 0x0, 0x4100}}, &(0x7f0000000000)='GPL\x00'}, 0x80) 309.672392ms ago: executing program 2 (id=2670): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000840)={0x5, 0x8e, 0x1, 0x3}, 0x10) unshare(0x20000400) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@deltfilter={0x32c, 0x2d, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x2}, {0xfff3, 0xfff1}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_RATE={0x6, 0x5, {0xb, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x0, 0x85}}, @TCA_CHAIN={0x8, 0xb, 0x113}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_NAME={0x18, 0x7, '\xe9\x1fq\x89Y\x1e\x923aK/../file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x74a, 0x6, 0x5, 0x7}, {0x5, 0x3, 0x3, 0xfffffffa}, {0x2, 0xe, 0xf, 0x30}, {0x6, 0x9, 0xce, 0x8000}]}}, @TCA_BPF_NAME={0xf, 0x7, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x26c, 0x2, [@TCA_CGROUP_EMATCHES={0x268, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x230, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xa43, 0x2, 0x7}, {0x8001, 0x6, 0x1, "f634775153aa"}}}, @TCF_EM_CONTAINER={0x4c, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xa}, "36a3ec7f094398db5bb1b26370a6516f427e8d07d6b6a52ce7e0d7026d68d42a643b5fc705c70770d9c279ff4a93460794620d33bbe46faf1ad8977520d6"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x2}, {0x8001, 0x7f, 0x6, 0x3, 0xa, 0x1}}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x8}, "6022a627eeb30c95bcf9ce56de8f45d00124b29b991734e969fa5b5775022aab25f440be676e31fa9e543106"}}, @TCF_EM_META={0x8c, 0x1, 0x0, 0x0, {{0xffff, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="fee2ad", @TCF_META_TYPE_VAR="ff884c05"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0xff, 0x2}, {0x1, 0xfd, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="4b6ebfabab", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="6d4cf03b3675c20c", @TCF_META_TYPE_VAR="b440"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x7e, 0x2}, {0x6, 0x9c}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3c, 0x6}, {0x8, 0xf7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x3}, {0xbb2, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="0c46e4193b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='p']}]}}, @TCF_EM_META={0xa4, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xfffd}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfe, 0x6c}, {0xffbc, 0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x2, 0x1}, {0x1, 0x3}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="243bba00e3e6229c"]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="9b8e075d4b0499", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d7774476785362", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="a987b3d5b65a2efa", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x4, 0x1}, {0x59, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="63efbcaf219986082de1", @TCF_META_TYPE_VAR="b0af", @TCF_META_TYPE_VAR="2685747f92f2f842adf1", @TCF_META_TYPE_VAR="d3"]}]}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x401}, "5ebd1da478e6ac325bf4"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xde, 0x3, 0x2}, {0x9, 0x1200000, 0x200, 0x24000}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9c18}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x72df, 0x8, 0x1}, {0x2, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x32c}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x3, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf25050000002800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="140002007465616d300000000000000000000000080009000600000038000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r3, @ANYBLOB="080003000000000008f502000000000000000100", @ANYRES32=r8, @ANYBLOB="0500070005000000050007000300000004000180dc0003800800020005000000cd000400c72b1b7626608e7907a4b070c5abf7b78ba00d27e16ae42eaccb90b8cec8ba6c0f02e4ca59574721284e4a3f0b0d6760cdfed988518139e426e507d2c7deceb79e34b733b9d660979145eadcad18547441bd572e0218cc5c665a4885623baaec472c6dfec725e339336259ece80eeeac326f799d1c4b956bd40855efadb7cd63ec00d822b8ef9008b14b4dc29cfea707b63184317fdc041fcd4d113bbb55962077f42d68305fda19fbe444e6f17b7ba4a75d511f7d45533da28e02e28c34331cc6fd7d7443e982b583000000"], 0x16c}}, 0x24024894) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$can_raw(0x1d, 0x3, 0x1) close(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 280.520572ms ago: executing program 1 (id=2671): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff28c3c41c6e9c49e300", 0x10) listen(r1, 0xfffffffc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 171.548709ms ago: executing program 3 (id=2672): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a0000000000000000000000000030c6f58b000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1476bb000000000000000000000000053500"], 0x1ac}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x24044000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x604ae000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000000)=""/31, 0x1f) 170.39188ms ago: executing program 2 (id=2673): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket(0x40000000015, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400000000fe00000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 64.314857ms ago: executing program 4 (id=2674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x13b, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000003380)={0x0, 0x9, 0x30}, &(0x7f00000033c0)=0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r7, 0xe}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000062c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0x8}}, 0x2, 0x22a5, 0xa2, 0x100, 0x5, 0x1, 0x22}, &(0x7f0000006380)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000074c0)={0x400, 0x8, 0x2, 0x1, 0x0}, &(0x7f0000007500)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000075c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000080)="4ab9a61ed6de94fe3286d0", 0xb}, {&(0x7f0000001380)="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", 0x1000}], 0x2, &(0x7f00000023c0)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x9aa1098d648f947a, 0x8, 0x100}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8, 0x8, 0xc}}], 0x40, 0x20040004}, {&(0x7f0000002400)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000002440)="21d7942a3c912bba2224a7f4f0533ff1e91e5b9e7883cb368c13e4ec57889681d55d15ce1aec04dfa94c91691126e79289c834a0576dac3827643717a3d297a5a979215f709cad24f12a9f5f8f4c68b18c03260f2b2883f472d13dd4d27e49f6a3e3537bcfb0b03d77afb24b20", 0x6d}, {&(0x7f00000024c0)="7fea244c0c72f88af998d2555d3f4e80ebc3f3daeaace1eb3ce0de5ecaf4e6c062b9f0ebb7268970e2d06c4af22ed5b6954306f1e9c445df850059644880d7017797ff907dce2900b0df24ed0f31fb6a9440943ac82e20dc119303d2d2ec5c7ca0fcae2048cf58e39132972d38011259ffdba7f3ca9e2b146f170b17ff9120806945a8869c95859d1c32bb6568807a3937082cbbcd9c3523d962a59bf119c727e05e99281047c1d44b55ad5e51c4004a7eb4d481565aedb683cdc4c14377150dc41f34a6b92d9f9bfd0d05900e57f5d6c2055e4be5c8e0300ce7c6d80311647b7ffe25b37ce7df1667241745603edb", 0xef}], 0x2, &(0x7f0000002600)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @init={0x18, 0x84, 0x0, {0x0, 0x120, 0x0, 0xa000}}], 0x38, 0x4841}, {&(0x7f0000002640)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002680)="b62d7d19464266205aaa571ef9cd9846896334da2eb34befbfd79b1f95d10721b01a6be3d4faef4864d1a54812081204f259fc40a4201cc18a6066a3c5d6e169dc140ae0d4b1c4fa9bf3065732056d329a", 0x51}, {&(0x7f0000002800)="b95dac31ecc1cc5f3558faaa89e536edbdc3025c40e23a77eef6f695b655983015e08fdef5e3c99b28e1365d3a44e94673a00d90d4815c33c07cfa685c4e0a07a1d1380eecb4712d8ea916c7409123e5eb3b485494e57e32a179581d98d6032f7f865214286245a7a1023a0f1908999f30c590e64c6ce6c75ff2d635b104b19e6a9592b1921d817afcfd41c22edfe91512af7cd71093e988c39374f0f917ed8e0b1a9a88d01329fa9a1bd7451eab2becea54997e099df1774a6a00812588acc610ea", 0xc2}, {&(0x7f0000002900)="295b085c707c4b92aaa80cc9ae9d703ccc4a93a98e69d9770e5ab964c0bde2224f7e86344ee8f063bc4de20007d90dac4186ef14a7a64eb3ce43e09669f5cbeb85b84b36b805c796e31527c330f5acc26990f55fe6371f98991632575204969608115b54ff8afa688942f4acb6dc3eff3db2217fba14ce8a7245fb9f727cb4839f1f87473094057f5bdf2a870b17e195884af7caabdbd22ca8119e", 0x9b}, {&(0x7f00000029c0)="740f6281b4557bdbfeb98aefca565fe4ec3d38aa077bec57e76d6bcd99eaae796467a2c6d37ee2bf9bf6f47cc7ab2eb4c6584b4b2016f90b46533c36deebd5b4db23f55b", 0x44}, {&(0x7f0000002a40)="7a3ac9fd2951098b19bf3c4cfa09100140ef8a7eea075e75028de105c6573b9b30acaa2d716bfbabae294e1146affd8d344a0ec02acec06d1edaec1856b6a36270def46d74cbd9cb315f6f6fc4a833da0d04cfe7f5157857004ad5a0977e1e58f85d7c31e88922fd894f7543a4b118cffe8e2acabd44da0f20b5845d8925c66708e83a037ceb2c479b69683c51246366047d5365c9e614c977669e66e177f76023f0e3955319ac636c18a889f6528db5622e9acf1e9988343c03a361e8804fc45564b86396cf62217f85574ad96fab", 0xcf}], 0x5, &(0x7f0000002bc0)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x400, 0x0, 0xa50, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfffffc01}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x2a}}], 0x68, 0x40648c1}, {&(0x7f0000002c40)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000032c0)=[{&(0x7f0000002c80)="e2b05bccdc018e5d4047d08b43ad3e50632af7d53c7d3d452e6ed6a01a4918536af5e1fc80e67353017299695ec30b1f2cb0fbd4e06912d60ae8c618e1e81eda1de628f8f87348b72578d14b0021951a9039d3d787f2787f5d81cef132b430417ff794bde1ace929bdb8e6c385734c576739a147c9eeeed623a82455f51f9eafd7bf2675e983a22f589d60d42c0a927cf812b0f7e1ca7de0ff6d3356476787e4eefecf95ee2267b7168d69a62d6f35467a1b964767bc87233d178227538cfc80d404715251b2b6acc2ed054c1eb7e47e", 0xd0}, {&(0x7f0000002d80)="2b8428b0c6d22ac5c04385a5ffeef4ea1541455fa939ab42567d791f0fa69c01978208bc48dc79cc88708763327ec5c4be09c94653c3f1c09b4b0709aec6d72c23770ab554b58b92f0a13db885a39f60d6c01232186824c9a05aeac3521c671f33050cff33904e6ca2796003faaaab9a0332556ca0b70fae1e547c19ca844b5794f4a422710636bf80498e56df295063a197f411536b75d8849595250e35ed6c6096acdd49982c7d8ef75f8150274e2fb6c021ef39acc43fa3744e17fb2c09a8b097e70df1a59c4212ed", 0xca}, {&(0x7f0000002e80)="a6c3cff5d2f0ea32645cf6581daf6f6f1ef17bbbc135bdd02052de8d099473b299", 0x21}, {&(0x7f0000002ec0)="5b3033eec1a3f8f91eb4b0ed6369578bfeb51fce544be457d9d31a1319999663b3b865b3693312461007db0ab7518ab97763c5e4018484b101c98ab263f857064267469618e24e9e7122d1f45ed57705f80008943987c847ecc4522598c7d349bb5c4757d07f046cbacefe045e1ac283f0f53c7bd90a4bc7e46bd7d664", 0x7d}, {&(0x7f0000002f40)="0b62ac4055114207aec4715df2cecab5d020b0bb997edcd367664cfb7ae0173395820162b9d6c2022e87deb9092125a01ed43940c14116f3cdade88f0416eaec470a00dfbb3196dc52037ead0122221020d2f7f92173dd208c922835e15401a024df9e326a76e843338217995a799a56e84b7048b4334e290d4df0ef67b3ae5c67ab5e7b890616640155ebdaec3a27af6b4a075796e6f9ee19bd6488ac8adf410ea1e4786cb42011616b4f1225ca91782d319964209c8a5aad97ebc90886e678dcde1bdb726a2bb2", 0xc8}, {&(0x7f0000003040)="04cefa3fbec2ca8b84ae9a0aa12b6da3", 0x10}, {&(0x7f0000003080)="28c8b7afacca823ed3e6ffd0421c9e62f357716c231a81954047f260cdecf8483003c8509e76261b60c940037b7d72658015d0c8aa88ba219ab28f11f7f023b78cd37f177473ad591a27db701413d2a7038e3e4bd6b7ee4cc6633fe70d82596af7e6b251eda2648ae270dd910004f7234aeff9463e902e28d4103c56fd28589c2654668c72ae08cf91319ca55cac8039e9f5454651a4682af631d18a6240e9be1b314af99edbbd8db8e3be325b26ddd313450845f4f7a806950ec482a612281cf1e7d05a83b41cd5896d3c30b9909154", 0xd0}, {&(0x7f0000003180)="1b928915afc60d0d6a8df6d5f5bf63691864fec017f5a7091d070abb8342a7ad99af3b2e50f8344794", 0x29}, {&(0x7f00000031c0)="b3779beff6b84d28a7942956dc5a070f515b267dd77e01156796acb919e45cb635c6a610d71f8c4d94dc504fcd6a853d8202a8668d349ffbabcd6192cab6df76c96cc37d175ec26b09c00bd5600656c69abc85d487acadfb75a106eb2e96addaa5f0bfeb86a3a636f3b881323eeb6b9d1bede8dbeeccc6acb052c6dcb46764ed8bec5551a58794a2713082d5aeb4f0f72251f67516480c2de4a3f998e9a0d78d976d7f7747a90a7b2b2d25b8b0446c620f5e3a0684395f1dd4808590a7c25f3cc7c05b500925b0293ee2e7114330a7354b2c11bac853a428f9f6150064659be593f55e", 0xe3}], 0x9, &(0x7f0000003400)=ANY=[@ANYBLOB="18000000000000008400000007000000000000000000000020000000000000008400000008000000fc0100000000000000000000000000012000000000000000840000000800000020010000000000009b7407888590359800000000000000011800000000000000840000000700000064010101000000011500000000400000840000000200000000020002", @ANYRES32=0x0, @ANYBLOB="2000000000000000840000000200000004000000850e000002000000", @ANYRES32=r4], 0xb0, 0x4000804}, {&(0x7f00000034c0)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003740)=[{&(0x7f0000003500)="3c763aabe1002ae3b4cd1fb6397964f2e10d7992ca5832daca6ea0bd1dfc2e42b53c24bf", 0x24}, {&(0x7f0000003540)="d7a783f6d00de98af666480b7e69adfc727e9026abcb4efe9756428f6d0cc6329dd75af6118bf3279eea00455d1790abb98386b7b9a18e9953d8fe4f1f3e0e6c89445b9f929e2d775c74b92b92bb5c11e6d4ce883ba5a76cb727f62ec485f365eda68ba196a14db51ea6e9f1ff344f20eb42d1afe9ee4704bd3ed7527a7b304497f2d5f3333c69ab6a24bd8fd2dd9f4af55ccc65bc865aeb659a7d438561", 0x9e}, {&(0x7f0000003600)="ff", 0x1}, {&(0x7f0000003640)="0c3ca7fc581e7ff8a7ef4552f74ecba97836bc97f7015a", 0x17}, {&(0x7f0000003680)="4cb237515177254655c3b4f09f01c8d48015518215e04bb3826796827b16b9bb8a016ad6740d3a4b9beeb819c78a794c866866b67585446d195f9eae6f0c5c8037a9a436321dd47cbf9a4b7648f9209a2365716409ca58b997866c074ef6ac005ad7186f5012316ef5358a0fc3c1abf732cfb8c543d1ff57b9d44e3cc621127ef4", 0x81}], 0x5, &(0x7f00000037c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x7fffffff}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0x4, 0x685, 0x0, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}], 0x60}, {&(0x7f0000003840)=@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000004bc0)=[{&(0x7f0000003880)="e21fe6aefb900dd3641ad38f36433b2f88522bbb84d458eb628d77d3aa658d70724a8e5af16d55d90b982173f3b55e03bcd7f81eb68e6efedcadfae4d7f15730be9a33376e739489e5499e85bb2cdc1203e4eddd429c9e389d0e7a931fe5c5b14918ca4db6758bc4c6a7a3afc610bf928c6295fc07ad132285fc", 0x7a}, {&(0x7f0000003900)="2c05115e2c65bf2670891c10f662c272269a4a53d4d83e4baae88355c8a82624f7356aa415d27c20d29332abc5baa5c2d6dbe69dd87c7c4b644a9ae1c8ce917a4459be08e52df9058c6cd878e8c814f16cc9a7e7a2665ffe34dda1ed4c951c7078ceb32fa3ed194f80e6082971c127ada8663721f216519b427996d33884861252b032e36abbce8e8c67d02c4b41fd7229351cd582b285db73ec818c8fad8fec482a10fe118dd063f08b7fe29052fd", 0xaf}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="127948e6ac29f22432cd6338799e3be6b89243b2a905107f72f7cdcc92704f5f1b637d5720f296cd8b97b24b0cfc14e054579da809a2b882558199dcb417a779180db71b21d88ec99a268922f4508096f5fa6ba432b53e5852f761e0d6e4d6ddb11019b728663ad7d7175c06d0d41dc88b03883dd1e731a9fee3833d80b3cc938e7fd20cccfac8f4367496e484b3f2874720315d121444df953e0ca3a58a24d149dce7031e6f7099fe00de584eccd8b58eeb3fa225c1dc4d01b8d0cfc22e", 0xbe}, {&(0x7f0000004a80)="16cca1bd75bdc392b195369bd5c23e463400bbd9803acedec9af1e15f54119dab385f053711c645eb7f6f47144d990327116ff6a3d10513546ff85e7bff825c7270605bb6ccfe54b757ab5ea84861522631507da3aa0bf76ed1b35fd6cbcb5eb532d00aa6e82a2f6b84379f527324daf55a917025df219cd42deda274fd42c8f4593db23cf58d7fb97ceb2186c4582f7f7666f7eb86dda210efd762068215652330e6fea91b47ce264e9ba3226a162545b6d514afa592fe63f11cba62c3587d9e1c113d48534ba329eab9bf6c2223565c4f651da33da265ee1ddfb1ee2ef97ee487018c69806b29c", 0xe8}, {&(0x7f0000004b80)="191332414a", 0x5}], 0x6, &(0x7f0000004c40)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x280, 0x8209, 0x0, 0x6, r7}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x58, 0x2004040}, {&(0x7f0000004cc0)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000006200)=[{&(0x7f0000004d00)="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", 0x1000}, {&(0x7f0000005d00)="2bedc5d5f2b6a4b32bfa9c01044242f5c450d4cf49d3690c79e48bfd1001b88f2a84894e5af7fc6c8da007c7b19a81e145a85903847d0580c8f24fa80e5afd19fff3e8d48bb4aacf764be16529451c086eb855ded87da0f7efa52b486add16870d0d71cbc1c8d9502c97d8ae702e3e262d70fab28b6746d1c67017fba36bf88ce06a43c4530f1a7cd09a74c3c2f48c4f8cf21a257ffd300a89dc90d4b00e349527243d141116ba", 0xa7}, {&(0x7f0000005dc0)="2c56812a46ab0ff50fa88f4de226a516cad00ad7f3dd90895a1e97b96b33de04aa195806f4b5c40e1944137e1e6fc2dbdfd116b8635bf684c4c479339b3c1faf04b5bede5b39f5e3945bd5c46596e31ac29ffd4621db3cc769bbe243df187c0b02ced3961196f880b76974e6fbb42ad1a28ff50d539641d1349300d7e0c27bb1bc4ca9d0248e01f4d6aea2d54db4a4f178561777d158e18d8756e2f9a25a4318ecb3c331f9", 0xa5}, {&(0x7f0000005e80)="f22acb04f2da3b276b312e1ee4dade12a5ae23b818df977dbdb3c28118847a04497f0d0581faf39b2410d0e03d8524b4671ba8df11e89937d30bd7074d97ef8e93a89a", 0x43}, {&(0x7f0000005f00)="1e1f04194b5fb741fba3b17c9efe4cf930c1768bbde264764d2f983ae91680175557705d5ec5fe3e2b27ed3017a22861bbcde782b565cb5f63271b0a9a335cc09b425950b9bdf02da977b8b2e771bfda8284c151faaadd37581c75da583035129d4c0465ed91352eae8cd443699ab9454bb477391626c7502dd1f84e584d52d45874bea19bbe66b00040e566911dcc12711edc08e0f6841aedd6c175f9fbdef425b57d35b7a8113067ed6b4892455855c2730dc494", 0xb5}, {&(0x7f0000005fc0)="ce74ee09834d9cfa0f88c3d62d8ad824e88518e4e170b81dd5d82970737014a92ab3e1ee818dc492c3237bceb57a1143080452a4770a710f9bfb62d6ab51c2832d7eb8ec99ae60dadbe8e0e266d5204d8ad8631f5c45d9e70000852e5e686725fa50828afa3ef53b9f5b0ae169d46a7184bffa5903c266adaf2d06e18b9cec2baf26da78975e73eed2d2c88bedadf2acc9a7eb6f19b4b02c5a0f051c45460d7c1fc49d38b0187b49b6125872602f40045c953086f1126b16b8caa38590333d4424be3563904cc05f5c16848110090458d988", 0xd2}, {&(0x7f00000060c0)="c38130d8028d17a8", 0x8}, {&(0x7f0000006100)="bf1a85f9e5b08c8fed51eff3c143517b9fb29a3aa89538fea4296a3b1413e10613fb49410cf7dc3b7085", 0x2a}, {&(0x7f0000006140)="b50eb69a372fd04d626519", 0xb}, {&(0x7f0000006180)="966d3e20d1a5a0ef8dcadc25e2ef77671e7dc607567a5e47e2c6624f3f43806f249ed9091238dfb3f47ac4bf15001352794e7caaa411b4d49be53c08a3f2c79ca41360d0e1917c032f244e1f150e6b31b34c42424637", 0x56}], 0xa, &(0x7f00000063c0)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x7, 0x200, 0x0, 0x2, 0x400, 0xffffffff, 0xd2, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x7681}}], 0x68, 0x40}, {&(0x7f0000006440)=@in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000007480)=[{&(0x7f0000006480)="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", 0x1000}], 0x1, &(0x7f0000007540)=[@dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x199, 0x601, 0xffffff20, 0x40, r9}}], 0x58, 0x48800}], 0x8, 0x4040004) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000380)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r13, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x14, 0x1, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r12, 0x0, 0x20000000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) 17.688064ms ago: executing program 0 (id=2675): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0xa401000000000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r4, 0x1, 0x42, &(0x7f0000000240)=""/121, &(0x7f00000002c0)=0x79) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}], 0x48}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 0s ago: executing program 1 (id=2676): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="500400001000030425bd7000ffffffff00000000", @ANYRES32, @ANYRES32, @ANYBLOB="b80034801400350073797a6b616c6c657231000000000000140035007663616e300000000000000000000000140035006361696630000000000000000000000014003500776731000000000000000000000000001400350065727370616e300000000000000400001400350064766d727030000000000000000000001400350076657468315f746f5f7465616d0000001400350076657468305f746f5f68737200000000140035007369743000000000000000002300000008002e"], 0x450}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) kernel console output (not intermixed with test programs): 0.482850][T10039] syzkaller1: entered promiscuous mode [ 210.491929][T10039] syzkaller1: entered allmulticast mode [ 210.590188][T10045] netlink: 'syz.3.1209': attribute type 39 has an invalid length. [ 210.654938][T10051] FAULT_INJECTION: forcing a failure. [ 210.654938][T10051] name failslab, interval 1, probability 0, space 0, times 0 [ 210.670329][T10051] CPU: 1 UID: 0 PID: 10051 Comm: syz.1.1212 Not tainted syzkaller #0 PREEMPT(full) [ 210.670356][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.670369][T10051] Call Trace: [ 210.670376][T10051] [ 210.670384][T10051] dump_stack_lvl+0xe8/0x150 [ 210.670418][T10051] should_fail_ex+0x412/0x560 [ 210.670454][T10051] should_failslab+0xa8/0x100 [ 210.670500][T10051] __kmalloc_cache_noprof+0x88/0x660 [ 210.670526][T10051] ? sctp_add_bind_addr+0x8c/0x370 [ 210.670553][T10051] sctp_add_bind_addr+0x8c/0x370 [ 210.670577][T10051] sctp_copy_local_addr_list+0x314/0x4f0 [ 210.670602][T10051] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 210.670632][T10051] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 210.670669][T10051] ? sctp_v4_is_any+0x35/0x60 [ 210.670691][T10051] ? sctp_copy_one_addr+0x93/0x360 [ 210.670716][T10051] sctp_bind_addr_copy+0xb3/0x3c0 [ 210.670738][T10051] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 210.670773][T10051] sctp_connect_new_asoc+0x2ff/0x6b0 [ 210.670803][T10051] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 210.670837][T10051] ? __local_bh_enable_ip+0xd0/0x130 [ 210.670864][T10051] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 210.670892][T10051] ? security_sctp_bind_connect+0x7e/0x2c0 [ 210.670925][T10051] sctp_sendmsg+0x1528/0x2c10 [ 210.670966][T10051] ? __pfx_sctp_sendmsg+0x10/0x10 [ 210.670995][T10051] ? aa_sk_perm+0x6d5/0x900 [ 210.671035][T10051] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.671070][T10051] ? sock_rps_record_flow+0x19/0x350 [ 210.671104][T10051] ? inet_sendmsg+0x2f4/0x370 [ 210.671138][T10051] ____sys_sendmsg+0x80a/0x9f0 [ 210.671181][T10051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.671223][T10051] ? import_iovec+0x73/0xa0 [ 210.671253][T10051] ___sys_sendmsg+0x2a5/0x360 [ 210.671291][T10051] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.671361][T10051] ? __fget_files+0x2a/0x420 [ 210.671380][T10051] ? __fget_files+0x3a0/0x420 [ 210.671411][T10051] __x64_sys_sendmsg+0x1bd/0x2a0 [ 210.671446][T10051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.671488][T10051] ? __pfx_ksys_write+0x10/0x10 [ 210.671525][T10051] do_syscall_64+0x14d/0xf80 [ 210.671545][T10051] ? trace_irq_disable+0x3b/0x150 [ 210.671563][T10051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.671585][T10051] ? clear_bhb_loop+0x40/0x90 [ 210.671618][T10051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.671640][T10051] RIP: 0033:0x7f2e83b9c819 [ 210.671659][T10051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.671678][T10051] RSP: 002b:00007f2e84a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.671701][T10051] RAX: ffffffffffffffda RBX: 00007f2e83e15fa0 RCX: 00007f2e83b9c819 [ 210.671716][T10051] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 210.671729][T10051] RBP: 00007f2e84a17090 R08: 0000000000000000 R09: 0000000000000000 [ 210.671742][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.671755][T10051] R13: 00007f2e83e16038 R14: 00007f2e83e15fa0 R15: 00007ffd743f8838 [ 210.671798][T10051] [ 210.993747][T10045] syz_tun (unregistering): left allmulticast mode [ 211.001658][T10045] bond0: (slave syz_tun): Releasing backup interface [ 211.032798][T10049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1211'. [ 211.273135][T10063] syzkaller0: entered promiscuous mode [ 211.287388][T10063] syzkaller0: entered allmulticast mode [ 211.384116][T10071] FAULT_INJECTION: forcing a failure. [ 211.384116][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 211.403657][T10071] CPU: 1 UID: 0 PID: 10071 Comm: syz.0.1222 Not tainted syzkaller #0 PREEMPT(full) [ 211.403686][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.403699][T10071] Call Trace: [ 211.403707][T10071] [ 211.403716][T10071] dump_stack_lvl+0xe8/0x150 [ 211.403751][T10071] should_fail_ex+0x412/0x560 [ 211.403792][T10071] should_failslab+0xa8/0x100 [ 211.403822][T10071] __kmalloc_cache_noprof+0x88/0x660 [ 211.403847][T10071] ? sctp_v6_cmp_addr+0x15/0xd0 [ 211.403868][T10071] ? sctp_add_bind_addr+0x8c/0x370 [ 211.403913][T10071] sctp_add_bind_addr+0x8c/0x370 [ 211.403939][T10071] sctp_copy_local_addr_list+0x314/0x4f0 [ 211.403966][T10071] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 211.403988][T10071] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 211.404025][T10071] ? sctp_v6_is_any+0x64/0x80 [ 211.404050][T10071] ? sctp_copy_one_addr+0x93/0x360 [ 211.404074][T10071] sctp_bind_addr_copy+0xb3/0x3c0 [ 211.404097][T10071] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 211.404133][T10071] sctp_connect_new_asoc+0x2ff/0x6b0 [ 211.404164][T10071] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.404207][T10071] ? __local_bh_enable_ip+0xd0/0x130 [ 211.404235][T10071] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 211.404263][T10071] ? security_sctp_bind_connect+0x7e/0x2c0 [ 211.404296][T10071] sctp_sendmsg+0x1528/0x2c10 [ 211.404339][T10071] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.404369][T10071] ? aa_sk_perm+0x6d5/0x900 [ 211.404410][T10071] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.404446][T10071] ? sock_rps_record_flow+0x19/0x350 [ 211.404478][T10071] ? __pfx_inet_sendmsg+0x10/0x10 [ 211.404510][T10071] ? inet_sendmsg+0x2f4/0x370 [ 211.404541][T10071] ? __pfx_inet_sendmsg+0x10/0x10 [ 211.404573][T10071] __sys_sendto+0x5de/0x710 [ 211.404607][T10071] ? __pfx___sys_sendto+0x10/0x10 [ 211.404633][T10071] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 211.404671][T10071] ? __fget_files+0x3a0/0x420 [ 211.404704][T10071] ? ksys_write+0x242/0x270 [ 211.404732][T10071] ? __pfx_ksys_write+0x10/0x10 [ 211.404762][T10071] __x64_sys_sendto+0xde/0x100 [ 211.404796][T10071] do_syscall_64+0x14d/0xf80 [ 211.404817][T10071] ? trace_irq_disable+0x3b/0x150 [ 211.404835][T10071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.404857][T10071] ? clear_bhb_loop+0x40/0x90 [ 211.404885][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.404906][T10071] RIP: 0033:0x7fe5c539c819 [ 211.404926][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.404945][T10071] RSP: 002b:00007fe5c62ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 211.404968][T10071] RAX: ffffffffffffffda RBX: 00007fe5c5615fa0 RCX: 00007fe5c539c819 [ 211.404984][T10071] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 211.404998][T10071] RBP: 00007fe5c62ab090 R08: 000020000005ffe4 R09: 000000000000001c [ 211.405012][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.405025][T10071] R13: 00007fe5c5616038 R14: 00007fe5c5615fa0 R15: 00007fff22f91ca8 [ 211.405060][T10071] [ 211.757491][T10025] Bluetooth: hci3: command 0x0406 tx timeout [ 211.758577][T10024] Bluetooth: hci0: command 0x0406 tx timeout [ 211.763725][T10025] Bluetooth: hci1: command 0x0406 tx timeout [ 211.771006][T10024] Bluetooth: hci2: command 0x0406 tx timeout [ 211.806747][T10077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'. [ 212.053176][T10088] sctp: [Deprecated]: syz.1.1228 (pid 10088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.053176][T10088] Use struct sctp_sack_info instead [ 212.074406][T10086] lo: entered allmulticast mode [ 212.136957][T10085] lo: left allmulticast mode [ 212.309272][T10100] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 212.422708][T10107] netlink: 'syz.1.1237': attribute type 21 has an invalid length. [ 212.526968][T10114] netlink: 'syz.1.1237': attribute type 4 has an invalid length. [ 212.576307][T10117] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.628213][T10115] syzkaller0: entered promiscuous mode [ 212.644171][T10115] syzkaller0: entered allmulticast mode [ 212.873358][T10123] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.095740][T10131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1245'. [ 213.114950][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1245'. [ 213.161282][T10134] netlink: 'syz.2.1246': attribute type 5 has an invalid length. [ 213.186375][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 213.245468][T10137] sctp: [Deprecated]: syz.3.1247 (pid 10137) Use of int in maxseg socket option. [ 213.245468][T10137] Use struct sctp_assoc_value instead [ 213.324552][T10139] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.339075][T10139] FAULT_INJECTION: forcing a failure. [ 213.339075][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 213.353189][T10139] CPU: 0 UID: 0 PID: 10139 Comm: syz.2.1248 Not tainted syzkaller #0 PREEMPT(full) [ 213.353215][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.353229][T10139] Call Trace: [ 213.353236][T10139] [ 213.353245][T10139] dump_stack_lvl+0xe8/0x150 [ 213.353280][T10139] should_fail_ex+0x412/0x560 [ 213.353328][T10139] should_failslab+0xa8/0x100 [ 213.353357][T10139] __kmalloc_cache_noprof+0x88/0x660 [ 213.353383][T10139] ? resv_map_alloc+0x88/0x2c0 [ 213.353404][T10139] ? __kmalloc_cache_noprof+0x15b/0x660 [ 213.353433][T10139] resv_map_alloc+0x88/0x2c0 [ 213.353459][T10139] hugetlb_reserve_pages+0x1f1/0x10a0 [ 213.353492][T10139] ? atime_needs_update+0x3ac/0x6d0 [ 213.353519][T10139] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 213.353554][T10139] ? mas_next_slot+0xc27/0xcf0 [ 213.353590][T10139] hugetlbfs_file_mmap_prepare+0x4b3/0x6b0 [ 213.353628][T10139] ? __pfx_hugetlbfs_file_mmap_prepare+0x10/0x10 [ 213.353658][T10139] ? mas_find+0xb0e/0xd30 [ 213.353683][T10139] mmap_region+0xdac/0x22a0 [ 213.353724][T10139] ? __lock_acquire+0x6b5/0x2cf0 [ 213.353756][T10139] ? __pfx_mmap_region+0x10/0x10 [ 213.353790][T10139] ? unwind_next_frame+0xa5/0x23c0 [ 213.353893][T10139] ? security_file_alloc+0x34/0x310 [ 213.353921][T10139] ? kasan_save_track+0x4f/0x80 [ 213.353963][T10139] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 213.353992][T10139] ? __lock_acquire+0x6b5/0x2cf0 [ 213.354029][T10139] ? apparmor_capable+0x126/0x170 [ 213.354064][T10139] ? bpf_lsm_capable+0x9/0x20 [ 213.354094][T10139] ? security_capable+0x7e/0x2c0 [ 213.354125][T10139] ? shmem_mapping+0xd/0x50 [ 213.354153][T10139] ? memfd_check_seals_mmap+0x165/0x200 [ 213.354190][T10139] do_mmap+0xc39/0x10c0 [ 213.354236][T10139] ? __pfx_do_mmap+0x10/0x10 [ 213.354265][T10139] ? down_write_killable+0x180/0x240 [ 213.354295][T10139] ? __pfx_down_write_killable+0x10/0x10 [ 213.354343][T10139] ? apparmor_mmap_file+0x2da/0x3e0 [ 213.354377][T10139] vm_mmap_pgoff+0x2c9/0x4f0 [ 213.354419][T10139] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 213.354448][T10139] ? rcu_is_watching+0x15/0xb0 [ 213.354480][T10139] ? hugetlbfs_get_inode+0x448/0x690 [ 213.354515][T10139] ? hugetlb_file_setup+0x42c/0x630 [ 213.354546][T10139] ksys_mmap_pgoff+0x586/0x760 [ 213.354575][T10139] do_syscall_64+0x14d/0xf80 [ 213.354596][T10139] ? trace_irq_disable+0x3b/0x150 [ 213.354615][T10139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.354638][T10139] ? clear_bhb_loop+0x40/0x90 [ 213.354664][T10139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.354686][T10139] RIP: 0033:0x7f000159c819 [ 213.354707][T10139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.354726][T10139] RSP: 002b:00007f0002515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 213.354749][T10139] RAX: ffffffffffffffda RBX: 00007f0001815fa0 RCX: 00007f000159c819 [ 213.354765][T10139] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 213.354778][T10139] RBP: 00007f0002515090 R08: ffffffffffffffff R09: 0000000000000000 [ 213.354793][T10139] R10: 0000000000042072 R11: 0000000000000246 R12: 0000000000000002 [ 213.354806][T10139] R13: 00007f0001816038 R14: 00007f0001815fa0 R15: 00007ffd848aaee8 [ 213.354841][T10139] [ 213.869547][T10152] tipc: Started in network mode [ 213.874579][T10152] tipc: Node identity 9a9acddb09d7, cluster identity 4711 [ 213.885090][T10152] tipc: Enabled bearer , priority 0 [ 213.896412][T10152] syzkaller0: entered promiscuous mode [ 213.902883][T10152] syzkaller0: entered allmulticast mode [ 213.914664][T10152] tipc: Resetting bearer [ 213.946628][T10158] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.212119][T10169] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 214.458164][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 214.469335][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 214.627729][T10145] tipc: Resetting bearer [ 214.689152][T10145] tipc: Disabling bearer [ 214.705000][T10184] lo: entered allmulticast mode [ 214.712589][T10183] lo: left allmulticast mode [ 214.945873][T10195] netlink: 'syz.4.1267': attribute type 3 has an invalid length. [ 215.001456][T10195] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 215.074736][T10203] sctp: [Deprecated]: syz.3.1268 (pid 10203) Use of int in maxseg socket option. [ 215.074736][T10203] Use struct sctp_assoc_value instead [ 215.272039][T10214] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1272'. [ 215.323449][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 215.384957][T10208] bond1: entered promiscuous mode [ 215.391705][T10220] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 215.425844][T10208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.446477][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 215.479395][T10221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.486678][T10221] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 215.498306][T10221] bond1: (slave vti0): Error -95 calling set_mac_address [ 216.118580][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 216.128993][T10249] netlink: 'syz.2.1279': attribute type 11 has an invalid length. [ 216.142877][T10250] tipc: Enabling of bearer rejected, failed to enable media [ 216.314322][T10248] vlan2: entered promiscuous mode [ 216.333415][T10248] team0: entered promiscuous mode [ 216.372082][T10248] team_slave_0: entered promiscuous mode [ 216.382575][T10248] team_slave_1: entered promiscuous mode [ 216.611538][T10280] openvswitch: netlink: Flow actions attr not present in new flow. [ 216.669534][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1287'. [ 217.033230][T10297] openvswitch: netlink: Flow actions attr not present in new flow. [ 217.180037][T10309] openvswitch: netlink: Flow actions attr not present in new flow. [ 217.393786][T10317] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 217.409371][T10317] netlink: 'syz.4.1301': attribute type 3 has an invalid length. [ 217.639443][T10324] syzkaller1: entered promiscuous mode [ 217.645167][T10324] syzkaller1: entered allmulticast mode [ 217.677754][T10326] netlink: 'syz.4.1304': attribute type 16 has an invalid length. [ 217.884825][T10332] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 218.358886][T10352] __nla_validate_parse: 3 callbacks suppressed [ 218.358908][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 218.379812][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 218.467208][T10360] netlink: 'syz.1.1312': attribute type 39 has an invalid length. [ 218.636344][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 218.708660][T10365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.785593][T10370] syzkaller1: entered promiscuous mode [ 218.793715][T10370] syzkaller1: entered allmulticast mode [ 219.048018][T10387] openvswitch: netlink: Flow actions attr not present in new flow. [ 219.076092][T10387] FAULT_INJECTION: forcing a failure. [ 219.076092][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 219.170928][T10394] netlink: 'syz.0.1324': attribute type 13 has an invalid length. [ 219.199174][T10387] CPU: 0 UID: 0 PID: 10387 Comm: syz.4.1326 Not tainted syzkaller #0 PREEMPT(full) [ 219.199204][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.199218][T10387] Call Trace: [ 219.199226][T10387] [ 219.199236][T10387] dump_stack_lvl+0xe8/0x150 [ 219.199273][T10387] should_fail_ex+0x412/0x560 [ 219.199314][T10387] should_failslab+0xa8/0x100 [ 219.199342][T10387] ? vm_area_alloc+0x24/0x140 [ 219.199368][T10387] kmem_cache_alloc_noprof+0x87/0x650 [ 219.199401][T10387] vm_area_alloc+0x24/0x140 [ 219.199428][T10387] mmap_region+0x10e0/0x22a0 [ 219.199469][T10387] ? __lock_acquire+0x6b5/0x2cf0 [ 219.199503][T10387] ? __pfx_mmap_region+0x10/0x10 [ 219.199540][T10387] ? unwind_next_frame+0xa5/0x23c0 [ 219.199642][T10387] ? security_file_alloc+0x34/0x310 [ 219.199673][T10387] ? kasan_save_track+0x4f/0x80 [ 219.199709][T10387] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 219.199763][T10387] ? apparmor_capable+0x126/0x170 [ 219.199799][T10387] ? bpf_lsm_capable+0x9/0x20 [ 219.199831][T10387] ? security_capable+0x7e/0x2c0 [ 219.199864][T10387] ? shmem_mapping+0xd/0x50 [ 219.199893][T10387] ? memfd_check_seals_mmap+0x165/0x200 [ 219.199929][T10387] do_mmap+0xc39/0x10c0 [ 219.199974][T10387] ? __pfx_do_mmap+0x10/0x10 [ 219.200004][T10387] ? down_write_killable+0x180/0x240 [ 219.200035][T10387] ? __pfx_down_write_killable+0x10/0x10 [ 219.200060][T10387] ? apparmor_mmap_file+0x2da/0x3e0 [ 219.200095][T10387] vm_mmap_pgoff+0x2c9/0x4f0 [ 219.200136][T10387] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 219.200165][T10387] ? rcu_is_watching+0x15/0xb0 [ 219.200197][T10387] ? hugetlbfs_get_inode+0x448/0x690 [ 219.200245][T10387] ? hugetlb_file_setup+0x42c/0x630 [ 219.200274][T10387] ksys_mmap_pgoff+0x586/0x760 [ 219.200301][T10387] do_syscall_64+0x14d/0xf80 [ 219.200322][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.200343][T10387] ? clear_bhb_loop+0x40/0x90 [ 219.200368][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.200388][T10387] RIP: 0033:0x7fab4299c819 [ 219.200407][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.200431][T10387] RSP: 002b:00007fab438c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.200454][T10387] RAX: ffffffffffffffda RBX: 00007fab42c15fa0 RCX: 00007fab4299c819 [ 219.200469][T10387] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 219.200482][T10387] RBP: 00007fab438c0090 R08: ffffffffffffffff R09: 0000000000000000 [ 219.200496][T10387] R10: 0000000000042072 R11: 0000000000000246 R12: 0000000000000002 [ 219.200509][T10387] R13: 00007fab42c16038 R14: 00007fab42c15fa0 R15: 00007ffec876da58 [ 219.200542][T10387] [ 219.610073][T10398] tipc: Enabled bearer , priority 0 [ 219.667361][T10398] syzkaller0: entered promiscuous mode [ 219.689698][T10398] syzkaller0: entered allmulticast mode [ 219.740423][T10408] xt_hashlimit: size too large, truncated to 1048576 [ 219.757786][T10398] tipc: Resetting bearer [ 219.807587][T10396] tipc: Resetting bearer [ 219.928360][T10396] tipc: Disabling bearer [ 219.976794][T10418] lo: Caught tx_queue_len zero misconfig [ 220.229547][T10426] syzkaller0: entered promiscuous mode [ 220.235113][T10426] syzkaller0: entered allmulticast mode [ 220.267205][T10426] 0: reclassify loop, rule prio 0, protocol 800 [ 220.331384][T10432] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1341'. [ 220.825760][T10445] syzkaller0: entered promiscuous mode [ 220.848681][T10445] syzkaller0: entered allmulticast mode [ 220.933667][T10450] tipc: Enabled bearer , priority 0 [ 220.943617][T10450] syzkaller0: entered promiscuous mode [ 220.949896][T10450] syzkaller0: entered allmulticast mode [ 220.969413][T10450] tipc: Resetting bearer [ 220.991123][T10449] tipc: Resetting bearer [ 221.028958][T10449] tipc: Disabling bearer [ 221.199970][T10460] xt_hashlimit: size too large, truncated to 1048576 [ 221.384766][T10464] xt_CT: No such helper "snmp_trap" [ 221.630133][T10486] syzkaller0: entered promiscuous mode [ 221.635841][T10486] syzkaller0: entered allmulticast mode [ 221.652454][T10486] 0: reclassify loop, rule prio 0, protocol 800 [ 221.838180][T10492] lo: entered allmulticast mode [ 221.967529][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.014068][T10501] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.195616][T10511] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 222.426926][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 222.459640][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 222.478523][T10522] netlink: 'syz.0.1372': attribute type 21 has an invalid length. [ 222.486452][T10522] netlink: 'syz.0.1372': attribute type 20 has an invalid length. [ 222.496422][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 222.512503][T10517] vlan2: entered promiscuous mode [ 222.645716][T10529] FAULT_INJECTION: forcing a failure. [ 222.645716][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 222.667152][T10529] CPU: 1 UID: 0 PID: 10529 Comm: syz.2.1375 Not tainted syzkaller #0 PREEMPT(full) [ 222.667183][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.667197][T10529] Call Trace: [ 222.667205][T10529] [ 222.667214][T10529] dump_stack_lvl+0xe8/0x150 [ 222.667263][T10529] should_fail_ex+0x412/0x560 [ 222.667313][T10529] should_failslab+0xa8/0x100 [ 222.667343][T10529] __kmalloc_cache_noprof+0x88/0x660 [ 222.667369][T10529] ? sctp_add_bind_addr+0x8c/0x370 [ 222.667395][T10529] sctp_add_bind_addr+0x8c/0x370 [ 222.667420][T10529] sctp_copy_local_addr_list+0x314/0x4f0 [ 222.667443][T10529] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 222.667464][T10529] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 222.667519][T10529] ? sctp_v4_is_any+0x35/0x60 [ 222.667540][T10529] ? sctp_copy_one_addr+0x93/0x360 [ 222.667565][T10529] sctp_bind_addr_copy+0xb3/0x3c0 [ 222.667587][T10529] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 222.667622][T10529] sctp_connect_new_asoc+0x2ff/0x6b0 [ 222.667651][T10529] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 222.667685][T10529] ? __local_bh_enable_ip+0xd0/0x130 [ 222.667713][T10529] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 222.667739][T10529] ? security_sctp_bind_connect+0x7e/0x2c0 [ 222.667773][T10529] sctp_sendmsg+0x1528/0x2c10 [ 222.667816][T10529] ? __pfx_sctp_sendmsg+0x10/0x10 [ 222.667846][T10529] ? aa_sk_perm+0x6d5/0x900 [ 222.667887][T10529] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.667924][T10529] ? sock_rps_record_flow+0x19/0x350 [ 222.667958][T10529] ? inet_sendmsg+0x2f4/0x370 [ 222.667993][T10529] ____sys_sendmsg+0x80a/0x9f0 [ 222.668037][T10529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.668078][T10529] ? import_iovec+0x73/0xa0 [ 222.668109][T10529] ___sys_sendmsg+0x2a5/0x360 [ 222.668150][T10529] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.668220][T10529] ? __fget_files+0x2a/0x420 [ 222.668240][T10529] ? __fget_files+0x3a0/0x420 [ 222.668270][T10529] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.668344][T10529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.668388][T10529] ? __pfx_ksys_write+0x10/0x10 [ 222.668427][T10529] do_syscall_64+0x14d/0xf80 [ 222.668448][T10529] ? trace_irq_disable+0x3b/0x150 [ 222.668467][T10529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.668489][T10529] ? clear_bhb_loop+0x40/0x90 [ 222.668522][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.668543][T10529] RIP: 0033:0x7f000159c819 [ 222.668562][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.668582][T10529] RSP: 002b:00007f0002515028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.668605][T10529] RAX: ffffffffffffffda RBX: 00007f0001815fa0 RCX: 00007f000159c819 [ 222.668621][T10529] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 222.668635][T10529] RBP: 00007f0002515090 R08: 0000000000000000 R09: 0000000000000000 [ 222.668649][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.668661][T10529] R13: 00007f0001816038 R14: 00007f0001815fa0 R15: 00007ffd848aaee8 [ 222.668696][T10529] [ 223.059669][T10533] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 223.145958][T10533] bond2: entered promiscuous mode [ 223.151538][T10533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.207909][T10537] ipvlan5: entered allmulticast mode [ 223.213280][T10537] bond2: entered allmulticast mode [ 223.302204][T10533] ipvlan6: entered allmulticast mode [ 223.366019][T10542] bond2: (slave bridge1): making interface the new active one [ 223.387570][T10542] bridge1: entered promiscuous mode [ 223.404834][T10542] bridge1: entered allmulticast mode [ 223.421619][T10542] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 223.594652][T10543] syzkaller0: entered promiscuous mode [ 223.600455][T10543] syzkaller0: entered allmulticast mode [ 223.804353][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 225.023228][T10574] tunl0: Caught tx_queue_len zero misconfig [ 225.049181][T10586] tipc: Enabled bearer , priority 0 [ 225.072437][T10587] syzkaller0: entered promiscuous mode [ 225.088495][T10587] syzkaller0: entered allmulticast mode [ 225.100698][T10594] tipc: Resetting bearer [ 225.132728][T10583] tipc: Resetting bearer [ 225.220531][T10583] tipc: Disabling bearer [ 225.890942][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1406'. [ 225.912524][T10636] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 225.950471][T10641] netlink: 'syz.2.1408': attribute type 11 has an invalid length. [ 226.095779][T10648] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 226.114286][T10649] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 226.197629][T10649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.226268][T10649] bond2: (slave gretap1): making interface the new active one [ 226.235037][T10649] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 226.256356][T10649] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1412'. [ 226.273778][T10652] xt_hashlimit: size too large, truncated to 1048576 [ 226.751990][T10680] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1422'. [ 226.788177][T10681] netlink: 'syz.0.1423': attribute type 11 has an invalid length. [ 227.011625][T10690] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 227.061108][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 227.112595][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 227.203260][T10709] xt_hashlimit: size too large, truncated to 1048576 [ 227.753431][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'. [ 227.763381][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 227.797136][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1440'. [ 227.818365][T10739] netlink: 'syz.4.1440': attribute type 13 has an invalid length. [ 227.840883][T10739] netlink: 'syz.4.1440': attribute type 11 has an invalid length. [ 228.066144][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 228.093128][T10755] vlan2: entered promiscuous mode [ 228.098702][T10755] veth0_to_bridge: entered promiscuous mode [ 228.478734][ T5916] IPVS: starting estimator thread 0... [ 228.494433][T10785] openvswitch: netlink: Flow actions attr not present in new flow. [ 228.587097][T10784] IPVS: using max 29 ests per chain, 69600 per kthread [ 228.668029][T10783] : entered promiscuous mode [ 229.013061][T10790] netlink: 888 bytes leftover after parsing attributes in process `syz.4.1451'. [ 229.110421][T10792] syzkaller1: entered promiscuous mode [ 229.115951][T10792] syzkaller1: entered allmulticast mode [ 229.309463][T10796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.458865][T10801] tipc: Enabled bearer , priority 0 [ 229.490933][T10801] syzkaller0: entered promiscuous mode [ 229.496478][T10801] syzkaller0: entered allmulticast mode [ 229.579799][T10810] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1457'. [ 229.702153][T10813] syzkaller1: entered promiscuous mode [ 229.709846][T10813] syzkaller1: entered allmulticast mode [ 229.873311][T10819] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 229.952344][T10824] netlink: 'syz.4.1462': attribute type 1 has an invalid length. [ 229.968666][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 230.002718][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 230.064256][T10824] bond3: entered promiscuous mode [ 230.077613][T10824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.116850][T10828] ipvlan7: entered allmulticast mode [ 230.130462][T10828] bond3: entered allmulticast mode [ 230.166483][T10824] ipvlan8: entered allmulticast mode [ 230.221312][T10828] bond3: (slave bridge2): making interface the new active one [ 230.240108][T10828] bridge2: entered promiscuous mode [ 230.252405][T10828] bridge2: entered allmulticast mode [ 230.272575][T10828] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 230.299735][T10799] tipc: Resetting bearer [ 230.351376][T10799] tipc: Disabling bearer [ 230.459918][T10831] netlink: 888 bytes leftover after parsing attributes in process `syz.4.1463'. [ 230.602016][T10837] netlink: 'syz.4.1466': attribute type 39 has an invalid length. [ 230.716126][T10839] syzkaller1: entered promiscuous mode [ 230.724347][T10839] syzkaller1: entered allmulticast mode [ 230.798079][T10843] FAULT_INJECTION: forcing a failure. [ 230.798079][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 230.837044][T10843] CPU: 1 UID: 0 PID: 10843 Comm: syz.3.1469 Not tainted syzkaller #0 PREEMPT(full) [ 230.837074][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.837106][T10843] Call Trace: [ 230.837115][T10843] [ 230.837125][T10843] dump_stack_lvl+0xe8/0x150 [ 230.837161][T10843] should_fail_ex+0x412/0x560 [ 230.837201][T10843] should_failslab+0xa8/0x100 [ 230.837232][T10843] __kmalloc_cache_noprof+0x88/0x660 [ 230.837258][T10843] ? sctp_add_bind_addr+0x8c/0x370 [ 230.837285][T10843] sctp_add_bind_addr+0x8c/0x370 [ 230.837312][T10843] sctp_copy_local_addr_list+0x314/0x4f0 [ 230.837338][T10843] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 230.837359][T10843] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 230.837400][T10843] ? sctp_v4_is_any+0x35/0x60 [ 230.837422][T10843] ? sctp_copy_one_addr+0x93/0x360 [ 230.837447][T10843] sctp_bind_addr_copy+0xb3/0x3c0 [ 230.837478][T10843] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 230.837514][T10843] sctp_connect_new_asoc+0x2ff/0x6b0 [ 230.837545][T10843] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 230.837588][T10843] ? __local_bh_enable_ip+0xd0/0x130 [ 230.837617][T10843] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 230.837644][T10843] ? security_sctp_bind_connect+0x7e/0x2c0 [ 230.837678][T10843] sctp_sendmsg+0x1528/0x2c10 [ 230.837733][T10843] ? __pfx_sctp_sendmsg+0x10/0x10 [ 230.837761][T10843] ? aa_sk_perm+0x6d5/0x900 [ 230.837802][T10843] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.837837][T10843] ? sock_rps_record_flow+0x19/0x350 [ 230.837871][T10843] ? inet_sendmsg+0x2f4/0x370 [ 230.837905][T10843] ____sys_sendmsg+0x80a/0x9f0 [ 230.837946][T10843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.837988][T10843] ? import_iovec+0x73/0xa0 [ 230.838017][T10843] ___sys_sendmsg+0x2a5/0x360 [ 230.838055][T10843] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.838125][T10843] ? __fget_files+0x2a/0x420 [ 230.838143][T10843] ? __fget_files+0x3a0/0x420 [ 230.838174][T10843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.838209][T10843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.838252][T10843] ? __pfx_ksys_write+0x10/0x10 [ 230.838288][T10843] do_syscall_64+0x14d/0xf80 [ 230.838308][T10843] ? trace_irq_disable+0x3b/0x150 [ 230.838327][T10843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.838348][T10843] ? clear_bhb_loop+0x40/0x90 [ 230.838374][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.838395][T10843] RIP: 0033:0x7f574a79c819 [ 230.838414][T10843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.838432][T10843] RSP: 002b:00007f574b609028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.838454][T10843] RAX: ffffffffffffffda RBX: 00007f574aa15fa0 RCX: 00007f574a79c819 [ 230.838470][T10843] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 230.838483][T10843] RBP: 00007f574b609090 R08: 0000000000000000 R09: 0000000000000000 [ 230.838496][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.838509][T10843] R13: 00007f574aa16038 R14: 00007f574aa15fa0 R15: 00007ffc66cda008 [ 230.838543][T10843] [ 231.258176][T10847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1471'. [ 231.514325][T10853] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 231.601577][T10853] bond4: entered promiscuous mode [ 231.607540][T10853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.625589][T10861] ipvlan8: entered allmulticast mode [ 231.631118][T10861] bond4: entered allmulticast mode [ 231.638670][T10855] xt_CT: No such helper "snmp_trap" [ 231.697420][T10853] ipvlan9: entered allmulticast mode [ 231.750268][T10861] bond4: (slave bridge4): making interface the new active one [ 231.767271][T10861] bridge4: entered promiscuous mode [ 231.780926][T10861] bridge4: entered allmulticast mode [ 231.796105][T10861] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 231.819654][T10864] syzkaller0: entered promiscuous mode [ 231.826291][T10864] syzkaller0: entered allmulticast mode [ 232.025182][T10870] geneve1: entered promiscuous mode [ 232.055425][T10870] macsec1: entered promiscuous mode [ 232.073112][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 232.082731][T10870] macsec1: entered allmulticast mode [ 232.088915][T10870] geneve1: entered allmulticast mode [ 232.096106][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 232.108411][T10877] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 232.302264][T10886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.403576][T10888] syzkaller1: entered promiscuous mode [ 232.409216][T10888] syzkaller1: entered allmulticast mode [ 232.525672][T10890] Unsupported ieee802154 address type: 0 [ 232.839121][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 233.042608][T10906] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 233.119114][T10910] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 233.371247][T10906] tipc: Resetting bearer [ 233.490443][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.498696][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.905909][T10906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.964833][T10906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.488241][T10922] 8021q: VLANs not supported on xfrm0 [ 234.513530][T10931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.590951][ T8532] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.629783][ T8532] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.650065][ T8532] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.665699][ T8532] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.846707][T10961] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1507'. [ 234.907118][T10965] netlink: 'syz.0.1506': attribute type 11 has an invalid length. [ 235.431932][T10983] netlink: 'syz.1.1512': attribute type 10 has an invalid length. [ 235.618526][T10989] IPVS: Error connecting to the multicast addr [ 235.693350][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 235.739869][T10989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1513'. [ 235.873511][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'. [ 235.885664][T10999] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.076880][T11013] xt_hashlimit: size too large, truncated to 1048576 [ 236.489296][T11031] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1527'. [ 236.561863][T11035] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1528'. [ 236.587154][T11028] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 236.733419][T11039] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 236.743612][T11041] sctp: [Deprecated]: syz.3.1530 (pid 11041) Use of int in max_burst socket option. [ 236.743612][T11041] Use struct sctp_assoc_value instead [ 236.759794][T11039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1529'. [ 237.094832][T11041] tipc: Resetting bearer [ 237.139726][T11055] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1532'. [ 237.231019][T11041] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.238651][T11041] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.297429][T11055] can: request_module (can-proto-5) failed. [ 238.349136][T11041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.420216][T11041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.232460][ T8534] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.267491][ T8534] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.276432][ T8534] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.336100][ T8534] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.374210][ T8534] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.398851][ T8534] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.476769][ T8534] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.507301][ T8534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.568362][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 239.583501][T11093] vlan2: entered promiscuous mode [ 239.614706][T11095] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 239.689022][T11094] 8021q: VLANs not supported on xfrm0 [ 239.750992][T11095] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 239.790680][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 239.817576][T11105] lo: entered allmulticast mode [ 239.826431][ T3486] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 239.855124][T11099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.878305][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 239.896398][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 239.959819][ T3486] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 240.426246][T11134] sctp: [Deprecated]: syz.4.1554 (pid 11134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.426246][T11134] Use struct sctp_sack_info instead [ 240.529557][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 240.556084][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 240.571698][T11140] netlink: 'syz.2.1555': attribute type 18 has an invalid length. [ 240.634313][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 240.752688][T11153] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.941751][T11169] FAULT_INJECTION: forcing a failure. [ 240.941751][T11169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.971737][T11172] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1563'. [ 241.007714][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.4.1562 Not tainted syzkaller #0 PREEMPT(full) [ 241.007744][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.007775][T11169] Call Trace: [ 241.007785][T11169] [ 241.007793][T11169] dump_stack_lvl+0xe8/0x150 [ 241.007829][T11169] should_fail_ex+0x412/0x560 [ 241.007869][T11169] _copy_from_user+0x2d/0xb0 [ 241.007897][T11169] ___sys_sendmsg+0x1c6/0x360 [ 241.007936][T11169] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.007973][T11169] ? kstrtouint+0x6e/0xe0 [ 241.008031][T11169] ? __fget_files+0x2a/0x420 [ 241.008050][T11169] ? __fget_files+0x3a0/0x420 [ 241.008077][T11169] __sys_sendmmsg+0x27c/0x4e0 [ 241.008112][T11169] ? __pfx___sys_sendmmsg+0x10/0x10 [ 241.008140][T11169] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 241.008188][T11169] ? ksys_write+0x242/0x270 [ 241.008214][T11169] ? __pfx_ksys_write+0x10/0x10 [ 241.008246][T11169] __x64_sys_sendmmsg+0xa0/0xc0 [ 241.008280][T11169] do_syscall_64+0x14d/0xf80 [ 241.008300][T11169] ? trace_irq_disable+0x3b/0x150 [ 241.008318][T11169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.008338][T11169] ? clear_bhb_loop+0x40/0x90 [ 241.008364][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.008384][T11169] RIP: 0033:0x7fab4299c819 [ 241.008404][T11169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.008423][T11169] RSP: 002b:00007fab4389f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.008445][T11169] RAX: ffffffffffffffda RBX: 00007fab42c16090 RCX: 00007fab4299c819 [ 241.008460][T11169] RDX: 0000000000000001 RSI: 0000200000001a40 RDI: 0000000000000003 [ 241.008474][T11169] RBP: 00007fab4389f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.008487][T11169] R10: 0000000000040012 R11: 0000000000000246 R12: 0000000000000001 [ 241.008499][T11169] R13: 00007fab42c16128 R14: 00007fab42c16090 R15: 00007ffec876da58 [ 241.008531][T11169] [ 241.008725][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1563'. [ 241.287113][T11172] netlink: 'syz.3.1563': attribute type 3 has an invalid length. [ 241.295007][T11172] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1563'. [ 241.370246][T11166] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1563'. [ 241.407848][T11184] 8021q: VLANs not supported on xfrm0 [ 241.604001][T11194] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 241.680166][T11180] nbd1: detected capacity change from 0 to 63 [ 241.707584][ T5836] block nbd1: Receive control failed (result -104) [ 241.715982][ T51] block nbd1: Receive control failed (result -32) [ 241.726633][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 241.903746][T11207] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 241.966380][T11207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.037816][T11210] bond4: (slave geneve3): making interface the new active one [ 242.051275][T11210] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 242.378896][T11215] syzkaller0: entered promiscuous mode [ 242.388048][T11215] syzkaller0: entered allmulticast mode [ 242.817426][T11247] xt_CT: No such helper "snmp_trap" [ 243.795595][T11228] tipc: Enabled bearer , priority 0 [ 243.803107][T11231] syzkaller0: entered promiscuous mode [ 243.810493][T11231] syzkaller0: entered allmulticast mode [ 243.838298][T11222] tipc: Resetting bearer [ 243.890063][T11222] tipc: Disabling bearer [ 244.106263][T11272] 8021q: VLANs not supported on xfrm0 [ 244.420518][T11285] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 244.492507][T11287] syzkaller1: entered promiscuous mode [ 244.498598][T11287] syzkaller1: entered allmulticast mode [ 244.672180][T11289] dummy0: Caught tx_queue_len zero misconfig [ 244.930547][T11298] syzkaller0: entered promiscuous mode [ 244.936155][T11298] syzkaller0: entered allmulticast mode [ 245.075984][T11306] __nla_validate_parse: 5 callbacks suppressed [ 245.076006][T11306] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1605'. [ 245.100588][T11308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'. [ 245.480678][T11317] netlink: 'syz.1.1611': attribute type 11 has an invalid length. [ 245.493509][T11317] netlink: 'syz.1.1611': attribute type 10 has an invalid length. [ 245.548050][T11319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1613'. [ 245.574293][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1613'. [ 245.580758][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 245.607507][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 245.616592][T11323] netlink: 'syz.0.1614': attribute type 18 has an invalid length. [ 245.680195][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1614'. [ 245.919513][T11325] syzkaller0: entered promiscuous mode [ 245.925123][T11325] syzkaller0: entered allmulticast mode [ 245.988817][T11344] netlink: 'syz.4.1620': attribute type 1 has an invalid length. [ 246.007574][T11344] netlink: 'syz.4.1620': attribute type 2 has an invalid length. [ 246.383120][T11364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1628'. [ 247.772702][T11371] tipc: Started in network mode [ 247.777729][T11371] tipc: Node identity ea8b3a542fa9, cluster identity 4711 [ 247.785046][T11371] tipc: Enabled bearer , priority 0 [ 247.799327][T11379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1628'. [ 247.814972][T11378] syzkaller0: entered promiscuous mode [ 247.838019][T11378] syzkaller0: entered allmulticast mode [ 247.850439][T11391] tipc: Resetting bearer [ 247.880274][T11363] tipc: Resetting bearer [ 247.912374][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 247.925811][T11397] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.998585][T11363] tipc: Disabling bearer [ 248.323290][T11428] Bluetooth: MGMT ver 1.23 [ 248.565816][T11439] syzkaller0: entered promiscuous mode [ 248.572273][T11439] syzkaller0: entered allmulticast mode [ 248.581333][T11439] 0: reclassify loop, rule prio 0, protocol 800 [ 248.963972][T11452] netlink: get zone limit has 4 unknown bytes [ 249.217382][T11474] 8021q: VLANs not supported on xfrm0 [ 249.338284][T11481] syzkaller1: entered promiscuous mode [ 249.344078][T11481] syzkaller1: entered allmulticast mode [ 249.355072][T11479] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 249.603866][T11493] sit0: left promiscuous mode [ 249.643306][T11493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.179614][T11510] __nla_validate_parse: 4 callbacks suppressed [ 250.179636][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 250.228293][T11512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1669'. [ 250.267628][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 250.302830][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 250.340165][T11512] netlink: 'syz.1.1669': attribute type 3 has an invalid length. [ 250.361472][T11512] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1669'. [ 250.386144][T11512] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1669'. [ 250.489669][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1671'. [ 250.726508][T11531] bridge1: entered promiscuous mode [ 250.739273][T11531] bridge1: entered allmulticast mode [ 250.755620][T11531] team0: Port device bridge1 added [ 250.946789][T11526] syzkaller0: entered promiscuous mode [ 250.972895][T11526] syzkaller0: entered allmulticast mode [ 250.982786][T11554] FAULT_INJECTION: forcing a failure. [ 250.982786][T11554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.052741][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.1.1679 Not tainted syzkaller #0 PREEMPT(full) [ 251.052772][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.052785][T11554] Call Trace: [ 251.052793][T11554] [ 251.052802][T11554] dump_stack_lvl+0xe8/0x150 [ 251.052838][T11554] should_fail_ex+0x412/0x560 [ 251.052878][T11554] _copy_to_user+0x31/0xb0 [ 251.052906][T11554] simple_read_from_buffer+0xe1/0x170 [ 251.052944][T11554] proc_fail_nth_read+0x1bb/0x230 [ 251.052980][T11554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.053015][T11554] ? rw_verify_area+0x2a6/0x4d0 [ 251.053039][T11554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.053073][T11554] vfs_read+0x20c/0xa70 [ 251.053094][T11554] ? fdget_pos+0x246/0x320 [ 251.053119][T11554] ? __pfx___mutex_lock+0x10/0x10 [ 251.053142][T11554] ? __pfx_vfs_read+0x10/0x10 [ 251.053167][T11554] ? __fget_files+0x2a/0x420 [ 251.053190][T11554] ? __fget_files+0x3a0/0x420 [ 251.053216][T11554] ? __fget_files+0x2a/0x420 [ 251.053245][T11554] ksys_read+0x150/0x270 [ 251.053271][T11554] ? __pfx_ksys_read+0x10/0x10 [ 251.053308][T11554] do_syscall_64+0x14d/0xf80 [ 251.053328][T11554] ? trace_irq_disable+0x3b/0x150 [ 251.053346][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.053368][T11554] ? clear_bhb_loop+0x40/0x90 [ 251.053393][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.053414][T11554] RIP: 0033:0x7f2e83b5d04e [ 251.053433][T11554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.053452][T11554] RSP: 002b:00007f2e84a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.053473][T11554] RAX: ffffffffffffffda RBX: 00007f2e84a176c0 RCX: 00007f2e83b5d04e [ 251.053489][T11554] RDX: 000000000000000f RSI: 00007f2e84a170a0 RDI: 0000000000000003 [ 251.053502][T11554] RBP: 00007f2e84a17090 R08: 0000000000000000 R09: 0000000000000000 [ 251.053514][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.053527][T11554] R13: 00007f2e83e16038 R14: 00007f2e83e15fa0 R15: 00007ffd743f8838 [ 251.053560][T11554] [ 251.110555][T11552] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 251.438307][T11566] netlink: 'syz.1.1680': attribute type 13 has an invalid length. [ 252.483009][T11547] 8021q: VLANs not supported on xfrm0 [ 252.495181][T11552] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 252.504444][T11552] team0: Port device netdevsim0 added [ 252.512043][T11566] gretap0: refused to change device tx_queue_len [ 252.527316][T11566] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 252.597342][T11568] syzkaller1: entered promiscuous mode [ 252.607200][T11568] syzkaller1: entered allmulticast mode [ 252.878107][T11594] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1687'. [ 252.893449][T11595] syzkaller0: entered promiscuous mode [ 252.907880][T11595] syzkaller0: entered allmulticast mode [ 253.009012][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1690'. [ 253.034853][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1693'. [ 253.035875][T11600] bond0: entered promiscuous mode [ 253.064282][T11604] netlink: 'syz.3.1693': attribute type 2 has an invalid length. [ 253.107560][T11600] bond_slave_0: entered promiscuous mode [ 253.113550][T11600] bond_slave_1: entered promiscuous mode [ 253.154074][T11600] bond0: left promiscuous mode [ 253.162336][T11600] bond_slave_0: left promiscuous mode [ 253.168526][T11600] bond_slave_1: left promiscuous mode [ 253.229406][T11616] syzkaller0: entered promiscuous mode [ 253.245225][T11616] syzkaller0: entered allmulticast mode [ 253.361624][T11622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.481282][T11624] syzkaller1: entered promiscuous mode [ 253.486854][T11624] syzkaller1: entered allmulticast mode [ 253.641124][T11635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.885668][T11642] syzkaller0: entered promiscuous mode [ 253.891513][T11642] syzkaller0: entered allmulticast mode [ 254.224427][T11646] team0: Port device team_slave_0 removed [ 255.482064][T11692] syzkaller0: entered promiscuous mode [ 255.488339][T11692] syzkaller0: entered allmulticast mode [ 255.678728][T11696] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 255.732329][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883761][T11702] __nla_validate_parse: 9 callbacks suppressed [ 255.883784][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 256.321924][T11714] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1727'. [ 256.368371][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 256.380752][T11718] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 256.395327][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 256.406515][T11720] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 256.414531][T11714] syzkaller1: entered promiscuous mode [ 256.422809][T11714] syzkaller1: entered allmulticast mode [ 256.558754][T11716] syzkaller0: entered promiscuous mode [ 256.565128][T11716] syzkaller0: entered allmulticast mode [ 256.580497][T11725] netlink: 'syz.2.1731': attribute type 11 has an invalid length. [ 256.731364][T11727] openvswitch: netlink: Flow actions attr not present in new flow. [ 256.791339][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 256.807872][T11729] vlan0: entered promiscuous mode [ 256.983531][T11742] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 257.058977][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 257.283851][T11757] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 257.293164][T11758] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 257.433592][T11764] openvswitch: netlink: Flow actions attr not present in new flow. [ 257.494146][T11768] 8021q: VLANs not supported on xfrm0 [ 257.686327][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 257.711999][T11774] vlan3: entered promiscuous mode [ 258.071246][T11796] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 258.095045][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 258.118884][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 258.143271][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 258.159571][T11799] tipc: Enabled bearer , priority 0 [ 258.170782][T11799] syzkaller0: entered promiscuous mode [ 258.176556][T11799] syzkaller0: entered allmulticast mode [ 258.211621][T11799] tipc: Resetting bearer [ 258.405672][T11812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.416728][T11812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.447771][T11815] syzkaller0: entered promiscuous mode [ 258.457090][T11815] syzkaller0: entered allmulticast mode [ 258.491973][T11812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.506394][T11812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.644231][T11812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.654425][T11812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.734051][T11812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.757136][T11812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.892934][T11792] tipc: Resetting bearer [ 258.929041][T11792] tipc: Disabling bearer [ 258.994757][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.008472][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.064192][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.072893][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.122283][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.140856][T11847] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 259.159876][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.200620][ T8534] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.212374][ T8534] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.224148][T11851] netlink: 'syz.4.1777': attribute type 11 has an invalid length. [ 259.372065][T11858] netlink: 'syz.2.1779': attribute type 18 has an invalid length. [ 259.709145][T11874] syzkaller1: entered promiscuous mode [ 259.714683][T11874] syzkaller1: entered allmulticast mode [ 259.844433][T11882] syzkaller0: entered promiscuous mode [ 259.864346][T11882] syzkaller0: entered allmulticast mode [ 259.953790][T11888] netlink: 'syz.1.1794': attribute type 18 has an invalid length. [ 259.978796][T11884] tipc: Enabled bearer , priority 0 [ 259.998379][T11884] syzkaller0: entered promiscuous mode [ 260.003942][T11884] syzkaller0: entered allmulticast mode [ 260.015067][T11892] syzkaller0: entered promiscuous mode [ 260.033264][T11892] syzkaller0: entered allmulticast mode [ 260.071555][T11884] tipc: Resetting bearer [ 260.080387][T11883] tipc: Resetting bearer [ 260.114919][T11883] tipc: Disabling bearer [ 260.296166][T11902] syzkaller0: entered promiscuous mode [ 260.303161][T11902] syzkaller0: entered allmulticast mode [ 261.163418][T11918] __nla_validate_parse: 18 callbacks suppressed [ 261.163438][T11918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1804'. [ 261.188447][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1804'. [ 261.278206][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 261.288310][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 261.298189][T11922] netlink: 'syz.3.1806': attribute type 18 has an invalid length. [ 261.311807][T11920] syzkaller1: entered promiscuous mode [ 261.312731][T11922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1806'. [ 261.332688][T11920] syzkaller1: entered allmulticast mode [ 261.377935][T11924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.655218][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 261.869391][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 261.898119][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 261.932299][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1817'. [ 261.950141][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 262.152809][T11958] syzkaller1: entered promiscuous mode [ 262.163406][T11958] syzkaller1: entered allmulticast mode [ 262.836756][T11993] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 262.836756][T11993] Please contact the netfilter-devel mailing list or update your nftables rules. [ 262.943441][T11997] syzkaller1: entered promiscuous mode [ 262.949344][T11997] syzkaller1: entered allmulticast mode [ 263.088286][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 263.095361][T12001] xt_CT: No such helper "snmp_trap" [ 263.106222][T12008] 8021q: VLANs not supported on xfrm0 [ 263.240805][T12019] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 263.377131][T12029] Unsupported ieee802154 address type: 0 [ 263.574724][T12040] 8021q: VLANs not supported on ip6_vti0 [ 263.608493][T12042] syzkaller0: entered promiscuous mode [ 263.614212][T12042] syzkaller0: entered allmulticast mode [ 264.016402][T12058] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 264.026338][T12060] openvswitch: netlink: Flow actions attr not present in new flow. [ 264.069661][T12057] vlan3: entered promiscuous mode [ 264.074797][T12057] veth0_to_bridge: entered promiscuous mode [ 264.167457][T12066] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 264.181269][T12058] bond7: entered promiscuous mode [ 264.186854][T12058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.221195][T12061] ipvlan10: entered allmulticast mode [ 264.226697][T12061] bond7: entered allmulticast mode [ 264.251368][T12058] bond7: (slave bridge5): making interface the new active one [ 264.259309][T12058] bridge5: entered promiscuous mode [ 264.264768][T12058] bridge5: entered allmulticast mode [ 264.272747][T12058] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 264.338189][T12064] ipvlan11: entered allmulticast mode [ 264.501530][T12076] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.577348][T12080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.794598][T12076] hmó3)óÿ: entered promiscuous mode [ 265.777836][T12131] syzkaller0: entered promiscuous mode [ 265.783388][T12131] syzkaller0: entered allmulticast mode [ 266.113823][T12155] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.300333][T12165] netlink: 'syz.2.1887': attribute type 5 has an invalid length. [ 266.317555][T12165] __nla_validate_parse: 16 callbacks suppressed [ 266.317573][T12165] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1887'. [ 266.543415][T12174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1890'. [ 266.606882][T12178] syzkaller0: entered promiscuous mode [ 266.613497][T12178] syzkaller0: entered allmulticast mode [ 266.624585][T12178] 0: reclassify loop, rule prio 0, protocol 800 [ 266.776460][T12187] FAULT_INJECTION: forcing a failure. [ 266.776460][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 266.798524][T12187] CPU: 1 UID: 0 PID: 12187 Comm: syz.4.1894 Not tainted syzkaller #0 PREEMPT(full) [ 266.798553][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 266.798568][T12187] Call Trace: [ 266.798576][T12187] [ 266.798584][T12187] dump_stack_lvl+0xe8/0x150 [ 266.798621][T12187] should_fail_ex+0x412/0x560 [ 266.798660][T12187] should_failslab+0xa8/0x100 [ 266.798692][T12187] __kmalloc_cache_noprof+0x88/0x660 [ 266.798718][T12187] ? sctp_add_bind_addr+0x8c/0x370 [ 266.798745][T12187] sctp_add_bind_addr+0x8c/0x370 [ 266.798770][T12187] sctp_copy_local_addr_list+0x314/0x4f0 [ 266.798803][T12187] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 266.798825][T12187] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 266.798864][T12187] ? sctp_v4_is_any+0x35/0x60 [ 266.798898][T12187] ? sctp_copy_one_addr+0x93/0x360 [ 266.798923][T12187] sctp_bind_addr_copy+0xb3/0x3c0 [ 266.798944][T12187] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 266.798979][T12187] sctp_connect_new_asoc+0x2ff/0x6b0 [ 266.799010][T12187] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 266.799061][T12187] ? __local_bh_enable_ip+0xd0/0x130 [ 266.799089][T12187] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 266.799117][T12187] ? security_sctp_bind_connect+0x7e/0x2c0 [ 266.799151][T12187] sctp_sendmsg+0x1528/0x2c10 [ 266.799195][T12187] ? __pfx_sctp_sendmsg+0x10/0x10 [ 266.799226][T12187] ? aa_sk_perm+0x6d5/0x900 [ 266.799268][T12187] ? __pfx_aa_sk_perm+0x10/0x10 [ 266.799305][T12187] ? sock_rps_record_flow+0x19/0x350 [ 266.799340][T12187] ? inet_sendmsg+0x2f4/0x370 [ 266.799376][T12187] ____sys_sendmsg+0x80a/0x9f0 [ 266.799419][T12187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.799467][T12187] ? import_iovec+0x73/0xa0 [ 266.799498][T12187] ___sys_sendmsg+0x2a5/0x360 [ 266.799537][T12187] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.799618][T12187] ? __fget_files+0x2a/0x420 [ 266.799638][T12187] ? __fget_files+0x3a0/0x420 [ 266.799667][T12187] __x64_sys_sendmsg+0x1bd/0x2a0 [ 266.799703][T12187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.799745][T12187] ? __pfx_ksys_write+0x10/0x10 [ 266.799783][T12187] do_syscall_64+0x14d/0xf80 [ 266.799811][T12187] ? trace_irq_disable+0x3b/0x150 [ 266.799830][T12187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.799853][T12187] ? clear_bhb_loop+0x40/0x90 [ 266.799880][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.799901][T12187] RIP: 0033:0x7fab4299c819 [ 266.799921][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.799940][T12187] RSP: 002b:00007fab438c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.799964][T12187] RAX: ffffffffffffffda RBX: 00007fab42c15fa0 RCX: 00007fab4299c819 [ 266.799980][T12187] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 266.799994][T12187] RBP: 00007fab438c0090 R08: 0000000000000000 R09: 0000000000000000 [ 266.800008][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.800020][T12187] R13: 00007fab42c16038 R14: 00007fab42c15fa0 R15: 00007ffec876da58 [ 266.800055][T12187] [ 267.155356][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 267.176176][T12190] netlink: 'syz.4.1897': attribute type 30 has an invalid length. [ 267.211694][T12190] netlink: 'syz.4.1897': attribute type 29 has an invalid length. [ 267.221653][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 267.275323][T12198] netlink: 912 bytes leftover after parsing attributes in process `syz.1.1899'. [ 267.295079][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 267.333154][T12195] xt_CT: No such helper "snmp_trap" [ 267.475224][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 267.488558][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 267.527932][T12209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1903'. [ 267.569310][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 267.587905][T12211] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1904'. [ 267.670222][T12216] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 267.721572][T12218] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 267.822252][T12218] bond5: entered promiscuous mode [ 267.852107][T12218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.885781][T12222] ipvlan5: entered allmulticast mode [ 267.891619][T12222] bond5: entered allmulticast mode [ 267.903637][T12218] ipvlan6: entered allmulticast mode [ 267.942289][T12218] bond5: (slave bridge3): making interface the new active one [ 267.950222][T12218] bridge3: entered promiscuous mode [ 267.955675][T12218] bridge3: entered allmulticast mode [ 267.963403][T12218] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 268.253485][T12238] xt_CT: No such helper "snmp_trap" [ 268.416636][T12256] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 268.572389][T12263] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 268.595277][T12265] netlink: 'syz.4.1924': attribute type 11 has an invalid length. [ 268.649520][T12263] bond8: entered promiscuous mode [ 268.654991][T12263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.672736][T12267] ipvlan12: entered allmulticast mode [ 268.678354][T12267] bond8: entered allmulticast mode [ 268.691783][T12263] ipvlan13: entered allmulticast mode [ 268.785313][T12263] bond8: (slave bridge6): making interface the new active one [ 268.807439][T12263] bridge6: entered promiscuous mode [ 268.822457][T12263] bridge6: entered allmulticast mode [ 268.834653][T12263] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 268.918418][T12276] netlink: 'syz.3.1928': attribute type 3 has an invalid length. [ 269.080989][T12281] xt_CT: No such helper "snmp_trap" [ 269.127734][T12285] syzkaller0: entered promiscuous mode [ 269.133383][T12285] syzkaller0: entered allmulticast mode [ 269.306772][T12300] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 269.480810][T12310] Unsupported ieee802154 address type: 0 [ 269.671578][T12324] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 269.710126][T12318] vlan3: entered promiscuous mode [ 269.804938][T12324] bond4: entered promiscuous mode [ 269.811880][T12324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.842934][T12328] ipvlan9: entered allmulticast mode [ 269.898826][T12328] bond4: entered allmulticast mode [ 269.949827][T12331] ipvlan10: entered allmulticast mode [ 270.009652][T12334] bond4: (slave bridge3): making interface the new active one [ 270.047118][T12334] bridge3: entered promiscuous mode [ 270.059665][T12334] bridge3: entered allmulticast mode [ 270.073067][T12334] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 270.266129][T12354] openvswitch: netlink: Flow actions attr not present in new flow. [ 270.290430][T12352] syzkaller0: entered promiscuous mode [ 270.295964][T12352] syzkaller0: entered allmulticast mode [ 270.411115][T12359] 8021q: VLANs not supported on xfrm0 [ 270.443801][T12361] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 270.900904][T12383] netlink: 'syz.0.1958': attribute type 18 has an invalid length. [ 271.005387][T12389] openvswitch: netlink: Flow actions attr not present in new flow. [ 271.224136][T12394] syzkaller0: entered promiscuous mode [ 271.237119][T12394] syzkaller0: entered allmulticast mode [ 271.745935][ T5159] block nbd1: Connection timed out, retrying (0/2 alive) [ 271.756106][ T5159] block nbd1: Connection timed out, retrying (0/2 alive) [ 271.763706][ T5159] block nbd1: Connection timed out, retrying (0/2 alive) [ 271.770931][ T5159] block nbd1: Connection timed out, retrying (0/2 alive) [ 271.778809][ T5159] block nbd1: Dead connection, failed to find a fallback [ 271.786973][ T5159] block nbd1: shutting down sockets [ 271.792930][ T5159] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.804640][ T5159] Buffer I/O error on dev nbd1, logical block 3, async page read [ 271.817202][ T5159] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.826867][ T5159] Buffer I/O error on dev nbd1, logical block 2, async page read [ 271.834777][ T5159] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.844437][ T5159] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.852325][ T5159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.861981][ T5159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.871330][ T5877] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.891972][ T5877] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.903417][ T5877] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.913184][ T5877] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.921210][ T5877] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.930885][ T5877] Buffer I/O error on dev nbd1, logical block 2, async page read [ 271.938799][ T5877] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.950167][ T5877] Buffer I/O error on dev nbd1, logical block 3, async page read [ 271.958104][ T5877] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.968042][ T5877] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.975915][ T5877] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.985677][ T5877] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.994728][ T5877] ldm_validate_partition_table(): Disk read failed. [ 272.003826][ T5877] Dev nbd1: unable to read RDB block 0 [ 272.010121][ T5877] nbd1: unable to read partition table [ 272.038033][ T5877] ldm_validate_partition_table(): Disk read failed. [ 272.045201][ T5877] Dev nbd1: unable to read RDB block 0 [ 272.072721][ T5877] nbd1: unable to read partition table [ 273.129022][T12419] tipc: Enabling of bearer rejected, failed to enable media [ 273.395384][T12461] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 273.508307][T12461] __nla_validate_parse: 13 callbacks suppressed [ 273.508328][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 273.853657][T12490] syzkaller0: entered promiscuous mode [ 273.867889][T12490] syzkaller0: entered allmulticast mode [ 273.889410][T12490] 0: reclassify loop, rule prio 0, protocol 800 [ 273.978478][T12498] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 274.091776][T12498] bond6: entered promiscuous mode [ 274.098768][T12498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.143689][T12502] ipvlan7: entered allmulticast mode [ 274.172261][T12502] bond6: entered allmulticast mode [ 274.219423][T12504] ipvlan8: entered allmulticast mode [ 274.332098][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 274.356014][T12507] syzkaller0: entered promiscuous mode [ 274.361926][T12507] syzkaller0: entered allmulticast mode [ 274.370358][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 274.404193][T12498] bond6: (slave bridge4): making interface the new active one [ 274.411890][T12498] bridge4: entered promiscuous mode [ 274.417418][T12498] bridge4: entered allmulticast mode [ 274.425575][T12498] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 274.450747][T12526] tipc: Enabled bearer , priority 0 [ 274.465101][T12525] tipc: Resetting bearer [ 275.172708][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2003'. [ 275.945438][T12521] tipc: Disabling bearer [ 275.965710][ T7239] tipc: Node number set to 3307354708 [ 276.274036][T12568] syzkaller0: entered promiscuous mode [ 276.279865][T12568] syzkaller0: entered allmulticast mode [ 276.462842][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 276.473438][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 278.005414][T12617] Unsupported ieee802154 address type: 0 [ 278.102404][T12614] bridge_slave_0 (unregistering): left allmulticast mode [ 278.118341][T12614] bridge_slave_0 (unregistering): left promiscuous mode [ 278.131939][T12614] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.389168][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 278.408760][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 278.448217][T12608] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 278.463298][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 278.495302][T12638] netlink: 'syz.1.2028': attribute type 39 has an invalid length. [ 278.843293][T12658] syzkaller1: entered promiscuous mode [ 278.849053][T12658] syzkaller1: entered allmulticast mode [ 279.248955][T12687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 279.293850][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2044'. [ 279.303216][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 279.315607][T12690] syzkaller0: entered promiscuous mode [ 279.324355][T12690] syzkaller0: entered allmulticast mode [ 279.337343][T12690] 0: reclassify loop, rule prio 0, protocol 800 [ 279.409802][T12694] netlink: 'syz.4.2047': attribute type 2 has an invalid length. [ 279.498212][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 279.518091][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2048'. [ 279.533854][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 279.543523][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2048'. [ 279.593979][T12697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2048'. [ 279.919476][T12718] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2054'. [ 279.979190][T12717] : option downdelay: invalid value (18446744073709547007) [ 279.990541][T12717] : option downdelay: allowed values 0 - 2147483647 [ 280.009382][T12717]  (unregistering): Released all slaves [ 280.040946][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 280.257299][T12737] Unsupported ieee802154 address type: 0 [ 280.499709][T12752] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 280.712767][T12765] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 280.861005][T12733] syz.0.2057 (12733) used greatest stack depth: 17472 bytes left [ 281.404567][T12784] vlan3: entered promiscuous mode [ 281.458228][T12788] bridge_slave_0 (unregistering): left allmulticast mode [ 281.465419][T12788] bridge_slave_0 (unregistering): left promiscuous mode [ 281.472641][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.636025][T12790] ipip1: entered promiscuous mode [ 281.807454][T12805] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 281.942325][T12808] tipc: Enabled bearer , priority 0 [ 281.954823][T12808] tipc: Resetting bearer [ 282.120818][T12812] tipc: Enabled bearer , priority 0 [ 282.130389][T12812] syzkaller0: entered promiscuous mode [ 282.135981][T12812] syzkaller0: entered allmulticast mode [ 282.160846][T12811] tipc: Resetting bearer [ 282.174994][T12811] tipc: Disabling bearer [ 282.569920][T12831] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 282.600644][T12831] ipip0: entered promiscuous mode [ 282.718594][T12806] tipc: Disabling bearer [ 282.842749][T12844] xt_hashlimit: size too large, truncated to 1048576 [ 283.259365][T12871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 283.318485][T12873] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 283.354946][T12873] bond10: entered promiscuous mode [ 283.361038][T12873] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.649214][T12897] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.687553][T12896] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.914170][T12906] netlink: 'syz.3.2112': attribute type 2 has an invalid length. [ 283.937102][T12906] netlink: 'syz.3.2112': attribute type 2 has an invalid length. [ 283.983372][T12906] macsec1: entered promiscuous mode [ 284.000495][T12920] openvswitch: netlink: Flow actions attr not present in new flow. [ 284.260516][T12932] __nla_validate_parse: 24 callbacks suppressed [ 284.260535][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2121'. [ 284.406402][T12939] netlink: zone id is out of range [ 284.412783][T12939] netlink: zone id is out of range [ 284.424026][T12939] netlink: zone id is out of range [ 284.436472][T12939] netlink: zone id is out of range [ 284.453184][T12939] netlink: zone id is out of range [ 284.466961][T12939] netlink: zone id is out of range [ 284.488678][T12939] netlink: zone id is out of range [ 284.495994][T12939] netlink: zone id is out of range [ 284.503341][T12939] netlink: zone id is out of range [ 284.510820][T12939] netlink: zone id is out of range [ 284.619567][T12945] syzkaller0: entered promiscuous mode [ 284.625107][T12945] syzkaller0: entered allmulticast mode [ 284.682016][T12943] syzkaller0: entered promiscuous mode [ 284.688936][T12943] syzkaller0: entered allmulticast mode [ 284.751325][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 284.762950][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 284.911624][T12956] netlink: 'syz.1.2130': attribute type 11 has an invalid length. [ 284.976272][T12958] syzkaller0: entered promiscuous mode [ 284.982066][T12958] syzkaller0: entered allmulticast mode [ 284.994530][T12956] tipc: Enabled bearer , priority 0 [ 286.235807][T12956] syzkaller0: entered promiscuous mode [ 286.241384][T12956] syzkaller0: entered allmulticast mode [ 286.280675][T12969] lo speed is unknown, defaulting to 1000 [ 286.280854][T12955] tipc: Resetting bearer [ 286.357622][T12955] tipc: Disabling bearer [ 286.364466][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 286.384197][T12969] lo speed is unknown, defaulting to 1000 [ 286.408075][T12969] lo speed is unknown, defaulting to 1000 [ 286.469487][T12969] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 286.634832][T12973] syzkaller0: entered promiscuous mode [ 286.653875][T12973] syzkaller0: entered allmulticast mode [ 286.670923][T12969] lo speed is unknown, defaulting to 1000 [ 287.553708][T13002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2141'. [ 287.581020][T13002] unsupported nlmsg_type 40 [ 287.656234][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2141'. [ 288.022082][T12969] lo speed is unknown, defaulting to 1000 [ 288.030989][T12969] lo speed is unknown, defaulting to 1000 [ 288.075993][T12969] lo speed is unknown, defaulting to 1000 [ 288.086353][T12969] lo speed is unknown, defaulting to 1000 [ 288.130910][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 288.140814][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 288.153462][T13008] netlink: 'syz.2.2142': attribute type 18 has an invalid length. [ 288.185077][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2142'. [ 288.286488][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 288.359319][T13013] syzkaller0: entered promiscuous mode [ 288.374092][T13013] syzkaller0: entered allmulticast mode [ 288.465238][T13022] bond11: option lacp_active: invalid value (8) [ 288.499559][T13022] bond11 (unregistering): Released all slaves [ 288.511297][T13021] xt_CT: No such helper "snmp_trap" [ 289.891676][T13034] kthread_run failed with err -4 [ 290.070570][T13052] __nla_validate_parse: 1 callbacks suppressed [ 290.070591][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 290.099305][T13055] syzkaller0: entered promiscuous mode [ 290.116059][T13055] syzkaller0: entered allmulticast mode [ 290.136417][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 290.150325][T13055] net_ratelimit: 337 callbacks suppressed [ 290.150345][T13055] 0: reclassify loop, rule prio 0, protocol 800 [ 290.157982][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 290.179468][T13057] netlink: 'syz.3.2156': attribute type 18 has an invalid length. [ 290.213645][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2156'. [ 290.533463][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 290.555013][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 290.637180][T13086] syzkaller0: entered promiscuous mode [ 290.642726][T13086] syzkaller0: entered allmulticast mode [ 291.009675][T13092] xt_CT: No such helper "snmp_trap" [ 292.278166][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 292.294989][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 292.309747][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2173'. [ 292.327379][T13110] netlink: 'syz.1.2171': attribute type 18 has an invalid length. [ 292.350911][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2171'. [ 292.845826][T13134] xt_CT: No such helper "snmp_trap" [ 292.989048][T13150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.018275][T13148] batadv_slave_1: entered promiscuous mode [ 293.085321][T13147] batadv_slave_1: left promiscuous mode [ 293.317700][T13171] macvtap0: entered promiscuous mode [ 293.388986][T13173] macvtap0 (unregistering): left promiscuous mode [ 294.056724][T13179] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 294.291648][T13188] tipc: Resetting bearer [ 294.344193][T13188] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 294.376382][T13194] FAULT_INJECTION: forcing a failure. [ 294.376382][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 294.391400][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.4.2207 Not tainted syzkaller #0 PREEMPT(full) [ 294.391430][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.391443][T13194] Call Trace: [ 294.391452][T13194] [ 294.391461][T13194] dump_stack_lvl+0xe8/0x150 [ 294.391497][T13194] should_fail_ex+0x412/0x560 [ 294.391537][T13194] should_failslab+0xa8/0x100 [ 294.391569][T13194] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 294.391594][T13194] ? __alloc_skb+0x186/0x7d0 [ 294.391622][T13194] ? __alloc_skb+0x1d0/0x7d0 [ 294.391649][T13194] ? __local_bh_enable_ip+0xd0/0x130 [ 294.391683][T13194] __alloc_skb+0x1d0/0x7d0 [ 294.391753][T13194] alloc_skb_with_frags+0xca/0x890 [ 294.391792][T13194] ? __lock_acquire+0x6b5/0x2cf0 [ 294.391827][T13194] sock_alloc_send_pskb+0x878/0x990 [ 294.391854][T13194] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 294.391888][T13194] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 294.391915][T13194] ? dev_get_by_index+0x22/0x2e0 [ 294.391937][T13194] ? dev_get_by_index+0x22/0x2e0 [ 294.391966][T13194] packet_sendmsg+0x33eb/0x50f0 [ 294.391996][T13194] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 294.392033][T13194] ? __lock_acquire+0x6b5/0x2cf0 [ 294.392071][T13194] ? __lock_acquire+0x6b5/0x2cf0 [ 294.392118][T13194] ? aa_sk_perm+0x6d5/0x900 [ 294.392150][T13194] ? __pfx_packet_sendmsg+0x10/0x10 [ 294.392180][T13194] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 294.392211][T13194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 294.392234][T13194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.392257][T13194] ? __pfx_packet_sendmsg+0x10/0x10 [ 294.392290][T13194] __sys_sendto+0x672/0x710 [ 294.392323][T13194] ? __pfx___sys_sendto+0x10/0x10 [ 294.392349][T13194] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 294.392384][T13194] ? __fget_files+0x3a0/0x420 [ 294.392413][T13194] ? ksys_write+0x242/0x270 [ 294.392440][T13194] ? __pfx_ksys_write+0x10/0x10 [ 294.392470][T13194] __x64_sys_sendto+0xde/0x100 [ 294.392504][T13194] do_syscall_64+0x14d/0xf80 [ 294.392525][T13194] ? trace_irq_disable+0x3b/0x150 [ 294.392543][T13194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.392565][T13194] ? clear_bhb_loop+0x40/0x90 [ 294.392592][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.392615][T13194] RIP: 0033:0x7fab4299c819 [ 294.392635][T13194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.392654][T13194] RSP: 002b:00007fab438c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 294.392677][T13194] RAX: ffffffffffffffda RBX: 00007fab42c15fa0 RCX: 00007fab4299c819 [ 294.392692][T13194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 294.392705][T13194] RBP: 00007fab438c0090 R08: 0000200000000200 R09: 0000000000000014 [ 294.392720][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.392733][T13194] R13: 00007fab42c16038 R14: 00007fab42c15fa0 R15: 00007ffec876da58 [ 294.392766][T13194] [ 294.701364][T13193] syzkaller0: entered promiscuous mode [ 294.706902][T13193] syzkaller0: entered allmulticast mode [ 294.818978][T13201] gretap1: entered promiscuous mode [ 294.824309][T13201] gretap1: entered allmulticast mode [ 294.991929][T13210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.053288][T13205] 8021q: VLANs not supported on xfrm0 [ 295.085865][T13215] __nla_validate_parse: 11 callbacks suppressed [ 295.085885][T13215] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2214'. [ 295.460591][T13238] FAULT_INJECTION: forcing a failure. [ 295.460591][T13238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.474577][T13238] CPU: 1 UID: 0 PID: 13238 Comm: syz.1.2220 Not tainted syzkaller #0 PREEMPT(full) [ 295.474605][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.474618][T13238] Call Trace: [ 295.474626][T13238] [ 295.474635][T13238] dump_stack_lvl+0xe8/0x150 [ 295.474671][T13238] should_fail_ex+0x412/0x560 [ 295.474709][T13238] _copy_from_user+0x2d/0xb0 [ 295.474736][T13238] kstrtouint_from_user+0xd6/0x180 [ 295.474760][T13238] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 295.474798][T13238] proc_fail_nth_write+0x8e/0x210 [ 295.474830][T13238] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.474868][T13238] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.474901][T13238] vfs_write+0x29a/0xb90 [ 295.474934][T13238] ? __pfx_vfs_write+0x10/0x10 [ 295.474959][T13238] ? __fget_files+0x2a/0x420 [ 295.474983][T13238] ? __fget_files+0x3a0/0x420 [ 295.475000][T13238] ? __fget_files+0x2a/0x420 [ 295.475028][T13238] ksys_write+0x150/0x270 [ 295.475053][T13238] ? __pfx_ksys_write+0x10/0x10 [ 295.475089][T13238] do_syscall_64+0x14d/0xf80 [ 295.475109][T13238] ? trace_irq_disable+0x3b/0x150 [ 295.475127][T13238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.475149][T13238] ? clear_bhb_loop+0x40/0x90 [ 295.475175][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.475196][T13238] RIP: 0033:0x7f2e83b5d04e [ 295.475223][T13238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.475242][T13238] RSP: 002b:00007f2e84a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.475263][T13238] RAX: ffffffffffffffda RBX: 00007f2e84a176c0 RCX: 00007f2e83b5d04e [ 295.475279][T13238] RDX: 0000000000000001 RSI: 00007f2e84a170a0 RDI: 0000000000000004 [ 295.475292][T13238] RBP: 00007f2e84a17090 R08: 0000000000000000 R09: 0000000000000000 [ 295.475305][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.475318][T13238] R13: 00007f2e83e16038 R14: 00007f2e83e15fa0 R15: 00007ffd743f8838 [ 295.475352][T13238] [ 295.808978][T13247] syzkaller0: entered promiscuous mode [ 295.814555][T13247] syzkaller0: entered allmulticast mode [ 296.008802][T13254] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 296.020187][T13252] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 296.059590][T13258] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 296.134939][T13254] 8021q: adding VLAN 0 to HW filter on device bond11 [ 296.185606][T13257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 296.214175][T13257] bond11: (slave batadv1): making interface the new active one [ 296.261730][T13257] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 296.350784][T13268] xt_CT: No such helper "snmp_trap" [ 296.431998][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 296.468285][T13276] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 296.760362][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 296.808334][T13276] bond12: entered promiscuous mode [ 296.847513][T13276] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.893268][T13279] ipvlan14: entered allmulticast mode [ 296.946919][T13279] bond12: entered allmulticast mode [ 297.194529][T13286] ipvlan15: entered allmulticast mode [ 297.231213][T13288] bond12: (slave bridge7): making interface the new active one [ 297.242116][T13288] bridge7: entered promiscuous mode [ 297.255631][T13288] bridge7: entered allmulticast mode [ 297.283962][T13288] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 297.447204][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.487953][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.538968][T13301] syzkaller0: entered promiscuous mode [ 297.544616][T13301] syzkaller0: entered allmulticast mode [ 297.554567][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.639954][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.686673][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.745999][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.763974][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.781221][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.800022][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.345228][T13346] syzkaller0: entered promiscuous mode [ 298.352370][T13346] syzkaller0: entered allmulticast mode [ 298.698483][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 298.713083][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 298.821986][T13368] syzkaller0: entered promiscuous mode [ 298.831246][T13368] syzkaller0: entered allmulticast mode [ 299.112132][T13387] syzkaller0: entered promiscuous mode [ 299.119173][T13387] syzkaller0: entered allmulticast mode [ 299.155985][T13391] xt_hashlimit: size too large, truncated to 1048576 [ 299.199893][T13394] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 299.207986][T13394] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2269'. [ 299.249077][T13394] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2269'. [ 299.284737][T13394] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2269'. [ 299.405014][T13401] syzkaller1: entered promiscuous mode [ 299.416392][T13401] syzkaller1: entered allmulticast mode [ 299.686232][T13409] lo speed is unknown, defaulting to 1000 [ 299.718193][T13416] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2277'. [ 299.897738][T13418] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 299.990374][T13424] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 300.055956][T13424] bond1: entered promiscuous mode [ 300.061639][T13424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.109085][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 300.222396][T13424] ipvlan2: entered allmulticast mode [ 300.236149][T13424] bond1: entered allmulticast mode [ 300.243369][T13445] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2286'. [ 300.274354][T13434] ipvlan3: entered allmulticast mode [ 300.309267][T13442] bond1: (slave bridge2): making interface the new active one [ 300.317191][T13442] bridge2: entered promiscuous mode [ 300.322755][T13442] bridge2: entered allmulticast mode [ 300.332809][T13442] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 300.383760][T13425] syzkaller0: entered promiscuous mode [ 300.389456][T13425] syzkaller0: entered allmulticast mode [ 300.919126][T13468] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 300.970407][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 301.934945][T13457] lo speed is unknown, defaulting to 1000 [ 302.261055][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 302.309220][T13490] netlink: 364 bytes leftover after parsing attributes in process `syz.1.2303'. [ 302.331391][T13480] vxcan3: entered promiscuous mode [ 302.339492][T13491] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2302'. [ 302.514947][T13494] syzkaller1: entered promiscuous mode [ 302.527513][T13496] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.2305'. [ 302.536829][T13494] syzkaller1: entered allmulticast mode [ 302.791772][T13503] syzkaller0: entered promiscuous mode [ 302.807651][T13508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.815869][T13503] syzkaller0: entered allmulticast mode [ 302.898969][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2309'. [ 302.977533][T13506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.993034][T13506] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 303.018880][T13506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 303.062893][T13509] syzkaller1: entered promiscuous mode [ 303.070213][T13509] syzkaller1: entered allmulticast mode [ 303.185821][T13520] xt_connbytes: Forcing CT accounting to be enabled [ 303.193206][T13520] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 303.215185][T13520] net_ratelimit: 58 callbacks suppressed [ 303.215206][T13520] openvswitch: netlink: Key type 300 is out of range max 32 [ 303.318100][T13528] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2314'. [ 303.336072][T13530] 8021q: VLANs not supported on xfrm0 [ 303.505934][T13537] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.2317'. [ 303.693035][T13545] syzkaller0: entered promiscuous mode [ 303.701352][T13545] syzkaller0: entered allmulticast mode [ 303.912545][T13552] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 303.926695][T13552] bond8 (unregistering): Released all slaves [ 304.189239][T13560] gre0: entered promiscuous mode [ 304.196536][T13560] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 304.223223][T13562] gretap0: entered promiscuous mode [ 304.229392][T13562] vlan3: entered promiscuous mode [ 304.363987][T13558] netlink: 'syz.2.2325': attribute type 2 has an invalid length. [ 304.405788][T13558] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 304.660451][T13585] syzkaller0: entered promiscuous mode [ 304.666088][T13585] syzkaller0: entered allmulticast mode [ 304.918317][T13600] Unsupported ieee802154 address type: 0 [ 304.929319][T13595] netlink: 'syz.3.2338': attribute type 18 has an invalid length. [ 305.038569][T13602] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 305.108276][T13606] 8021q: VLANs not supported on xfrm0 [ 305.450720][T13624] __nla_validate_parse: 10 callbacks suppressed [ 305.450743][T13624] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2348'. [ 305.579761][T13632] syzkaller0: entered promiscuous mode [ 305.585455][T13632] syzkaller0: entered allmulticast mode [ 305.741576][T13628] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2349'. [ 305.778249][T13628] netlink: 'syz.0.2349': attribute type 2 has an invalid length. [ 305.797755][T13628] netlink: 'syz.0.2349': attribute type 1 has an invalid length. [ 306.104103][T13644] Cannot find del_set index 2 as target [ 306.409976][T13655] xt_CT: No such helper "snmp_trap" [ 306.575139][T13668] syzkaller0: entered promiscuous mode [ 306.585803][T13668] syzkaller0: entered allmulticast mode [ 306.656732][T13673] tipc: Enabled bearer , priority 0 [ 306.715077][T13673] syzkaller0: entered promiscuous mode [ 306.760098][T13673] syzkaller0: entered allmulticast mode [ 306.789275][T13677] 8021q: VLANs not supported on xfrm0 [ 306.904810][T13673] tipc: Resetting bearer [ 306.927433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.957836][T13673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.069365][T13690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2369'. [ 307.097156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.120932][T13690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2369'. [ 307.190117][T13687] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2368'. [ 307.200781][T13687] netlink: 'syz.4.2368': attribute type 2 has an invalid length. [ 307.209620][T13687] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 307.237178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.245894][T13693] netlink: 'syz.3.2370': attribute type 11 has an invalid length. [ 307.377038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.399237][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 307.517055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.740554][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 307.749826][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 307.849592][T13665] tipc: Resetting bearer [ 307.889422][T13665] tipc: Disabling bearer [ 307.903026][ T5899] tipc: Node number set to 2471349723 [ 307.933995][T13699] lo speed is unknown, defaulting to 1000 [ 308.194322][T13713] syzkaller0: entered promiscuous mode [ 308.200160][T13713] syzkaller0: entered allmulticast mode [ 308.812401][T13749] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2387'. [ 308.882820][T13750] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2387'. [ 308.923461][T13750] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 308.941708][T13756] ip6erspan1: entered allmulticast mode [ 309.050966][T13765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 309.099809][T13768] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.129546][T13770] Unsupported ieee802154 address type: 0 [ 309.193444][T13774] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 309.523871][T13787] netlink: 'syz.1.2396': attribute type 2 has an invalid length. [ 309.542398][T13787] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 309.596141][T13789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.999648][T13802] netlink: 'syz.2.2403': attribute type 1 has an invalid length. [ 310.010781][T13802] netlink: 'syz.2.2403': attribute type 1 has an invalid length. [ 310.023081][T13802] netlink: 'syz.2.2403': attribute type 4 has an invalid length. [ 310.117437][T13805] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 310.240213][T13811] lo speed is unknown, defaulting to 1000 [ 310.289069][T13812] lo speed is unknown, defaulting to 1000 [ 310.321166][T13819] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 310.349548][T13821] netlink: 'syz.4.2408': attribute type 18 has an invalid length. [ 310.589991][T13827] __nla_validate_parse: 13 callbacks suppressed [ 310.590013][T13827] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2410'. [ 310.778112][T13827] netlink: 'syz.1.2410': attribute type 2 has an invalid length. [ 310.796157][T13827] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 311.011226][T13837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.073247][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2415'. [ 311.251738][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 311.288643][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 311.438198][T13861] netlink: 'syz.2.2422': attribute type 14 has an invalid length. [ 311.602819][T13858] netlink: 1311 bytes leftover after parsing attributes in process `syz.4.2420'. [ 311.619279][T13868] netlink: 185420 bytes leftover after parsing attributes in process `syz.0.2424'. [ 311.782683][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 311.804320][T13880] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.2429'. [ 312.015903][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 312.028439][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'. [ 312.295467][T13874] lo speed is unknown, defaulting to 1000 [ 312.942941][T13923] syzkaller0: entered promiscuous mode [ 312.949002][T13923] syzkaller0: entered allmulticast mode [ 313.078109][T13928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.277859][T13934] Unsupported ieee802154 address type: 0 [ 313.344093][ T30] audit: type=1800 audit(1775919317.761:3): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2447" name=CB dev="tmpfs" ino=2681 res=0 errno=0 [ 313.739943][T13952] syz_tun: entered promiscuous mode [ 313.764324][T13952] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 313.803006][T13954] syzkaller0: entered promiscuous mode [ 313.808936][T13954] syzkaller0: entered allmulticast mode [ 314.412708][T13987] syzkaller0: entered promiscuous mode [ 314.432976][T13987] syzkaller0: entered allmulticast mode [ 314.656910][T13996] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 314.768882][T14002] validate_nla: 11 callbacks suppressed [ 314.768902][T14002] netlink: 'syz.2.2473': attribute type 11 has an invalid length. [ 314.916693][T14010] openvswitch: netlink: Tunnel attr 4107 out of range max 16 [ 314.935689][T14008] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 315.160706][T14016] netlink: 'syz.0.2479': attribute type 10 has an invalid length. [ 315.259310][T14023] bond0: entered promiscuous mode [ 315.295828][T14023] bond_slave_0: entered promiscuous mode [ 315.302191][T14023] bond_slave_1: entered promiscuous mode [ 315.309693][T14023] batadv0: entered promiscuous mode [ 315.316211][T14023] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 315.326371][T14023] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 315.337986][T14023] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 315.350465][T14023] bond0: left promiscuous mode [ 315.355299][T14023] bond_slave_0: left promiscuous mode [ 315.362852][T14023] bond_slave_1: left promiscuous mode [ 315.418849][T14023] batadv0: left promiscuous mode [ 315.857769][T14050] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 315.997165][T14057] tipc: Resetting bearer [ 316.075705][T14057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.165749][T14057] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.173663][T14066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.186252][T14057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.215715][ T7237] lo speed is unknown, defaulting to 1000 [ 316.222461][T14071] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 316.230678][ T7237] syz2: Port: 1 Link ACTIVE [ 316.551958][T14086] openvswitch: netlink: Tunnel attr 15627 out of range max 16 [ 316.651700][T14089] __nla_validate_parse: 10 callbacks suppressed [ 316.651720][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 317.033626][T14096] syzkaller1: entered promiscuous mode [ 317.040059][T14096] syzkaller1: entered allmulticast mode [ 317.172208][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370548][T14109] netlink: 'syz.3.2506': attribute type 10 has an invalid length. [ 317.469325][T14119] netlink: 884 bytes leftover after parsing attributes in process `syz.4.2509'. [ 317.573221][T14124] netlink: 'syz.3.2511': attribute type 2 has an invalid length. [ 317.615156][T14127] openvswitch: netlink: IP tunnel dst address not specified [ 317.708593][T14124] : entered promiscuous mode [ 317.812337][ T7239] IPVS: starting estimator thread 0... [ 317.907572][T14134] IPVS: using max 27 ests per chain, 64800 per kthread [ 317.921371][T14138] syzkaller0: entered promiscuous mode [ 317.937193][T14138] syzkaller0: entered allmulticast mode [ 318.025678][T14142] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 318.068063][T14142] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 318.069934][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 318.100067][T14142] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 318.260807][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 318.276362][T14163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 318.669458][T14170] syzkaller0: entered promiscuous mode [ 318.704717][T14170] syzkaller0: entered allmulticast mode [ 318.833065][T14176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.016168][T14183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.135916][T14188] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2534'. [ 319.179104][T14190] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2533'. [ 319.202528][T14190] netlink: 'syz.2.2533': attribute type 2 has an invalid length. [ 319.228542][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2535'. [ 319.238163][T14190] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 319.433381][T14213] netlink: 'syz.3.2541': attribute type 11 has an invalid length. [ 319.652845][T14216] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 319.667944][T14216] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2544'. [ 319.715036][T14219] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 319.762441][T14231] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 319.787687][T14232] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2546'. [ 320.129981][T14245] netlink: 'syz.3.2550': attribute type 2 has an invalid length. [ 320.148000][T14245] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 320.548211][T14280] syzkaller0: entered promiscuous mode [ 320.553768][T14280] syzkaller0: entered allmulticast mode [ 320.815839][T14294] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 320.860980][T14295] syzkaller0: entered promiscuous mode [ 320.876840][T14295] syzkaller0: entered allmulticast mode [ 320.888778][T14297] FAULT_INJECTION: forcing a failure. [ 320.888778][T14297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.904120][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.1.2563 Not tainted syzkaller #0 PREEMPT(full) [ 320.904149][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.904162][T14297] Call Trace: [ 320.904170][T14297] [ 320.904179][T14297] dump_stack_lvl+0xe8/0x150 [ 320.904214][T14297] should_fail_ex+0x412/0x560 [ 320.904253][T14297] _copy_from_user+0x2d/0xb0 [ 320.904279][T14297] ___sys_recvmsg+0x175/0x590 [ 320.904310][T14297] ? __lock_acquire+0x6b5/0x2cf0 [ 320.904343][T14297] ? __pfx____sys_recvmsg+0x10/0x10 [ 320.904414][T14297] do_recvmmsg+0x334/0x800 [ 320.904443][T14297] ? __pfx_do_recvmmsg+0x10/0x10 [ 320.904497][T14297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 320.904534][T14297] __x64_sys_recvmmsg+0x198/0x250 [ 320.904556][T14297] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 320.904604][T14297] do_syscall_64+0x14d/0xf80 [ 320.904624][T14297] ? trace_irq_disable+0x3b/0x150 [ 320.904643][T14297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.904665][T14297] ? clear_bhb_loop+0x40/0x90 [ 320.904691][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.904711][T14297] RIP: 0033:0x7f2e83b9c819 [ 320.904731][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.904750][T14297] RSP: 002b:00007f2e84a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 320.904771][T14297] RAX: ffffffffffffffda RBX: 00007f2e83e15fa0 RCX: 00007f2e83b9c819 [ 320.904787][T14297] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007 [ 320.904801][T14297] RBP: 00007f2e84a17090 R08: 0000000000000000 R09: 0000000000000000 [ 320.904814][T14297] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 320.904827][T14297] R13: 00007f2e83e16038 R14: 00007f2e83e15fa0 R15: 00007ffd743f8838 [ 320.904859][T14297] [ 321.242444][T14304] netlink: 'syz.3.2565': attribute type 2 has an invalid length. [ 321.287823][T14304] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 321.303616][T14308] syzkaller0: entered promiscuous mode [ 321.303656][T14312] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 321.317735][T14308] syzkaller0: entered allmulticast mode [ 321.342701][T14310] syzkaller0: entered promiscuous mode [ 321.349231][T14310] syzkaller0: entered allmulticast mode [ 321.361119][T14308] 0: reclassify loop, rule prio 0, protocol 800 [ 321.727972][T14330] __nla_validate_parse: 10 callbacks suppressed [ 321.728001][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 321.812071][T14330] vlan3: entered promiscuous mode [ 321.960797][T14347] macsec2: entered promiscuous mode [ 321.962997][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 322.085335][T14354] syzkaller0: entered promiscuous mode [ 322.097390][T14354] syzkaller0: entered allmulticast mode [ 322.176219][T14356] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2586'. [ 322.670282][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'. [ 322.695796][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 322.714209][T14372] netlink: 'syz.3.2593': attribute type 18 has an invalid length. [ 322.749688][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2593'. [ 322.788131][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2594'. [ 322.873710][T14377] vlan3: entered promiscuous mode [ 322.924772][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2596'. [ 322.960930][T14379] lo speed is unknown, defaulting to 1000 [ 323.230654][T14396] netlink: 364 bytes leftover after parsing attributes in process `syz.2.2601'. [ 323.274645][T14400] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 323.350382][T14400] bond4: entered promiscuous mode [ 323.356060][T14400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.376424][T14407] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 323.397571][T14400] ipvlan0: entered allmulticast mode [ 323.403012][T14400] bond4: entered allmulticast mode [ 323.420701][T14400] ipvlan1: entered allmulticast mode [ 323.446902][T14400] bond4: (slave bridge3): making interface the new active one [ 323.470366][T14400] bridge3: entered promiscuous mode [ 323.475967][T14400] bridge3: entered allmulticast mode [ 323.485204][T14400] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 323.513544][T14410] netlink: 'syz.4.2606': attribute type 10 has an invalid length. [ 323.526426][T14410] FAULT_INJECTION: forcing a failure. [ 323.526426][T14410] name failslab, interval 1, probability 0, space 0, times 0 [ 323.542228][T14410] CPU: 1 UID: 0 PID: 14410 Comm: syz.4.2606 Not tainted syzkaller #0 PREEMPT(full) [ 323.542257][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.542269][T14410] Call Trace: [ 323.542277][T14410] [ 323.542285][T14410] dump_stack_lvl+0xe8/0x150 [ 323.542319][T14410] should_fail_ex+0x412/0x560 [ 323.542368][T14410] should_failslab+0xa8/0x100 [ 323.542396][T14410] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 323.542419][T14410] ? __raw_spin_lock_init+0x45/0x100 [ 323.542440][T14410] ? __alloc_skb+0x1d0/0x7d0 [ 323.542488][T14410] __alloc_skb+0x1d0/0x7d0 [ 323.542519][T14410] tipc_msg_build+0x162/0xf00 [ 323.542556][T14410] ? tipc_node_find+0x3bd/0x490 [ 323.542583][T14410] ? tipc_node_find+0xb3/0x490 [ 323.542610][T14410] ? __pfx_tipc_msg_build+0x10/0x10 [ 323.542656][T14410] __tipc_sendmsg+0x1902/0x2bf0 [ 323.542694][T14410] ? up_write+0x1ab/0x410 [ 323.542718][T14410] ? __pfx___tipc_sendmsg+0x10/0x10 [ 323.542744][T14410] ? process_measurement+0x195e/0x1c80 [ 323.542770][T14410] ? aa_label_sk_perm+0x532/0x6e0 [ 323.542809][T14410] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 323.542842][T14410] ? __pfx_process_measurement+0x10/0x10 [ 323.542871][T14410] ? look_up_lock_class+0x57/0x110 [ 323.542894][T14410] ? register_lock_class+0x31/0x2e0 [ 323.542927][T14410] ? __lock_acquire+0x6b5/0x2cf0 [ 323.542992][T14410] ? __pfx_woken_wake_function+0x10/0x10 [ 323.543020][T14410] ? tipc_sendmsg+0x47/0x70 [ 323.543055][T14410] ? __local_bh_enable_ip+0xd0/0x130 [ 323.543097][T14410] tipc_sendmsg+0x55/0x70 [ 323.543132][T14410] ____sys_sendmsg+0x972/0x9f0 [ 323.543163][T14410] ? __lock_acquire+0x6b5/0x2cf0 [ 323.543200][T14410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.543244][T14410] ? import_iovec+0x73/0xa0 [ 323.543276][T14410] ___sys_sendmsg+0x2a5/0x360 [ 323.543315][T14410] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.543404][T14410] __sys_sendmmsg+0x27c/0x4e0 [ 323.543444][T14410] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.543476][T14410] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 323.543528][T14410] ? ksys_write+0x242/0x270 [ 323.543556][T14410] ? __pfx_ksys_write+0x10/0x10 [ 323.543589][T14410] __x64_sys_sendmmsg+0xa0/0xc0 [ 323.543625][T14410] do_syscall_64+0x14d/0xf80 [ 323.543646][T14410] ? trace_irq_disable+0x3b/0x150 [ 323.543666][T14410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.543688][T14410] ? clear_bhb_loop+0x40/0x90 [ 323.543716][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.543738][T14410] RIP: 0033:0x7fab4299c819 [ 323.543759][T14410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.543778][T14410] RSP: 002b:00007fab438c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.543801][T14410] RAX: ffffffffffffffda RBX: 00007fab42c15fa0 RCX: 00007fab4299c819 [ 323.543818][T14410] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 000000000000000b [ 323.543833][T14410] RBP: 00007fab438c0090 R08: 0000000000000000 R09: 0000000000000000 [ 323.543846][T14410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.543859][T14410] R13: 00007fab42c16038 R14: 00007fab42c15fa0 R15: 00007ffec876da58 [ 323.543896][T14410] [ 323.559404][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 324.075375][T14422] netlink: 'syz.3.2608': attribute type 13 has an invalid length. [ 324.111464][T14422] netlink: 'syz.3.2608': attribute type 17 has an invalid length. [ 324.141706][T14417] tipc: Resetting bearer [ 324.517311][T14419] ip6gre2: entered promiscuous mode [ 324.522814][T14419] ip6gre2: entered allmulticast mode [ 324.530012][ T5899] lo speed is unknown, defaulting to 1000 [ 324.536471][ T5899] syz2: Port: 1 Link DOWN [ 324.565299][T14444] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.624518][T14422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.634283][T14422] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.646617][T14422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.681188][T14431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.733699][ T7239] lo speed is unknown, defaulting to 1000 [ 324.749195][ T7239] syz2: Port: 1 Link ACTIVE [ 324.950077][T14462] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.044464][T14464] lo speed is unknown, defaulting to 1000 [ 325.294345][T14479] xt_CT: No such helper "snmp_trap" [ 325.427956][T14490] netlink: 'syz.1.2629': attribute type 10 has an invalid length. [ 325.551048][T14495] syzkaller0: entered promiscuous mode [ 325.556560][T14495] syzkaller0: entered allmulticast mode [ 325.841880][T14503] vlan3: entered promiscuous mode [ 326.054146][T14516] xt_hashlimit: size too large, truncated to 1048576 [ 326.175363][T14525] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 326.188597][T14523] netlink: 'syz.3.2642': attribute type 10 has an invalid length. [ 326.202731][T14519] netlink: 'syz.1.2643': attribute type 10 has an invalid length. [ 326.203127][T14528] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.226110][T14527] syzkaller1: entered promiscuous mode [ 326.234614][T14527] syzkaller1: entered allmulticast mode [ 326.292329][T14533] netlink: 'syz.2.2644': attribute type 4 has an invalid length. [ 326.328404][T14529] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 326.341314][T14529] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 326.381464][T14533] bond2: (slave gretap1): making interface the new active one [ 326.394284][T14533] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 326.475843][T14525] macvlan4: entered promiscuous mode [ 326.481459][T14525] macvlan4: entered allmulticast mode [ 326.488838][T14525] bond2: entered promiscuous mode [ 326.494039][T14525] gretap1: entered promiscuous mode [ 326.501705][T14525] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 326.533025][T14525] bond2: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 326.582974][T14525] bond2: left promiscuous mode [ 326.588036][T14525] gretap1: left promiscuous mode [ 326.796964][T14552] lo speed is unknown, defaulting to 1000 [ 326.864074][T14548] syzkaller1: entered promiscuous mode [ 326.869713][T14548] syzkaller1: entered allmulticast mode [ 327.062328][T14564] __nla_validate_parse: 9 callbacks suppressed [ 327.062348][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 327.182102][T14570] netlink: 'syz.0.2656': attribute type 10 has an invalid length. [ 327.280645][T14578] netlink: 'syz.3.2658': attribute type 10 has an invalid length. [ 327.422415][T14580] xt_CT: No such helper "snmp_trap" [ 327.457907][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'. [ 327.539821][T14589] syzkaller0: entered promiscuous mode [ 327.549813][T14589] syzkaller0: entered allmulticast mode [ 327.690364][T14597] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2667'. [ 327.824176][T14608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'. [ 327.856863][T14608] netem: change failed [ 327.900255][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2673'. [ 327.921024][T14610] vlan3: entered promiscuous mode [ 327.943297][T14608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.992562][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 328.040276][ T51] block nbd2: Receive control failed (result -107) [ 328.049403][ T51] [ 328.051788][ T51] ====================================================== [ 328.058923][ T51] WARNING: possible circular locking dependency detected [ 328.065982][ T51] syzkaller #0 Not tainted [ 328.070430][ T51] ------------------------------------------------------ [ 328.077483][ T51] kworker/u9:0/51 is trying to acquire lock: [ 328.083480][ T51] ffff88807f23b660 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 328.092493][ T51] [ 328.092493][ T51] but task is already holding lock: [ 328.099878][ T51] ffff8880787b5e70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c6a/0x1d90 [ 328.108806][ T51] [ 328.108806][ T51] which lock already depends on the new lock. [ 328.108806][ T51] [ 328.119237][ T51] [ 328.119237][ T51] the existing dependency chain (in reverse order) is: [ 328.128273][ T51] [ 328.128273][ T51] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 328.135972][ T51] __mutex_lock+0x19f/0x1300 [ 328.141126][ T51] nbd_queue_rq+0x37b/0x1100 [ 328.146282][ T51] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 328.152389][ T51] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 328.159280][ T51] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.165819][ T51] blk_mq_run_hw_queue+0x348/0x4f0 [ 328.171481][ T51] blk_mq_dispatch_list+0xd16/0xe10 [ 328.177221][ T51] blk_mq_flush_plug_list+0x48d/0x570 [ 328.183133][ T51] __blk_flush_plug+0x3ed/0x4d0 [ 328.188522][ T51] __submit_bio+0x28d/0x580 [ 328.193566][ T51] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 328.199740][ T51] block_read_full_folio+0x599/0x830 [ 328.205571][ T51] filemap_read_folio+0x137/0x3b0 [ 328.211137][ T51] do_read_cache_folio+0x358/0x590 [ 328.216801][ T51] read_part_sector+0xb6/0x2b0 [ 328.222106][ T51] adfspart_check_ICS+0xa5/0xa40 [ 328.227583][ T51] bdev_disk_changed+0x7ba/0x1550 [ 328.233147][ T51] blkdev_get_whole+0x380/0x510 [ 328.238540][ T51] bdev_open+0x31e/0xd30 [ 328.243317][ T51] blkdev_open+0x470/0x610 [ 328.248273][ T51] do_dentry_open+0x785/0x14e0 [ 328.253580][ T51] vfs_open+0x3b/0x340 [ 328.258197][ T51] path_openat+0x2e08/0x3860 [ 328.263327][ T51] do_file_open+0x23e/0x4a0 [ 328.268367][ T51] do_sys_openat2+0x113/0x200 [ 328.273616][ T51] __x64_sys_openat+0x138/0x170 [ 328.279008][ T51] do_syscall_64+0x14d/0xf80 [ 328.284140][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.290576][ T51] [ 328.290576][ T51] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 328.297841][ T51] __mutex_lock+0x19f/0x1300 [ 328.302975][ T51] nbd_queue_rq+0xc6/0x1100 [ 328.308023][ T51] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 328.314123][ T51] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 328.321020][ T51] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.327544][ T51] blk_mq_run_hw_queue+0x348/0x4f0 [ 328.333198][ T51] blk_mq_dispatch_list+0xd16/0xe10 [ 328.338949][ T51] blk_mq_flush_plug_list+0x48d/0x570 [ 328.344863][ T51] __blk_flush_plug+0x3ed/0x4d0 [ 328.350265][ T51] __submit_bio+0x28d/0x580 [ 328.355312][ T51] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 328.361481][ T51] block_read_full_folio+0x599/0x830 [ 328.367308][ T51] filemap_read_folio+0x137/0x3b0 [ 328.372878][ T51] do_read_cache_folio+0x358/0x590 [ 328.378557][ T51] read_part_sector+0xb6/0x2b0 [ 328.383864][ T51] adfspart_check_ICS+0xa5/0xa40 [ 328.389440][ T51] bdev_disk_changed+0x7ba/0x1550 [ 328.395015][ T51] blkdev_get_whole+0x380/0x510 [ 328.400427][ T51] bdev_open+0x31e/0xd30 [ 328.405211][ T51] blkdev_open+0x470/0x610 [ 328.410259][ T51] do_dentry_open+0x785/0x14e0 [ 328.415607][ T51] vfs_open+0x3b/0x340 [ 328.420219][ T51] path_openat+0x2e08/0x3860 [ 328.425357][ T51] do_file_open+0x23e/0x4a0 [ 328.430441][ T51] do_sys_openat2+0x113/0x200 [ 328.435754][ T51] __x64_sys_openat+0x138/0x170 [ 328.441159][ T51] do_syscall_64+0x14d/0xf80 [ 328.446286][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.452719][ T51] [ 328.452719][ T51] -> #4 (set->srcu){.+.+}-{0:0}: [ 328.459867][ T51] __synchronize_srcu+0xca/0x300 [ 328.465344][ T51] elevator_switch+0x1e8/0x7a0 [ 328.470652][ T51] elevator_change+0x2cc/0x450 [ 328.476042][ T51] elevator_set_default+0x36c/0x430 [ 328.481780][ T51] blk_register_queue+0x366/0x430 [ 328.487371][ T51] __add_disk+0x677/0xd50 [ 328.492251][ T51] add_disk_fwnode+0xfb/0x480 [ 328.497502][ T51] nbd_dev_add+0x72c/0xb50 [ 328.502469][ T51] nbd_init+0x168/0x1f0 [ 328.507163][ T51] do_one_initcall+0x250/0x8d0 [ 328.512477][ T51] do_initcall_level+0x104/0x190 [ 328.517961][ T51] do_initcalls+0x59/0xa0 [ 328.522832][ T51] kernel_init_freeable+0x2a6/0x3e0 [ 328.528666][ T51] kernel_init+0x1d/0x1d0 [ 328.533540][ T51] ret_from_fork+0x51e/0xb90 [ 328.538690][ T51] ret_from_fork_asm+0x1a/0x30 [ 328.543997][ T51] [ 328.543997][ T51] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 328.551841][ T51] __mutex_lock+0x19f/0x1300 [ 328.556970][ T51] elevator_change+0x1b3/0x450 [ 328.562304][ T51] elevator_set_none+0xb5/0x140 [ 328.567704][ T51] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 328.574056][ T51] nbd_start_device+0x17f/0xb10 [ 328.579453][ T51] nbd_genl_connect+0x165b/0x1cf0 [ 328.585013][ T51] genl_family_rcv_msg_doit+0x22a/0x330 [ 328.591095][ T51] genl_rcv_msg+0x61c/0x7a0 [ 328.596130][ T51] netlink_rcv_skb+0x232/0x4b0 [ 328.601432][ T51] genl_rcv+0x28/0x40 [ 328.605951][ T51] netlink_unicast+0x80f/0x9b0 [ 328.611254][ T51] netlink_sendmsg+0x813/0xb40 [ 328.616558][ T51] ____sys_sendmsg+0x972/0x9f0 [ 328.621868][ T51] ___sys_sendmsg+0x2a5/0x360 [ 328.627091][ T51] __x64_sys_sendmsg+0x1bd/0x2a0 [ 328.632572][ T51] do_syscall_64+0x14d/0xf80 [ 328.637701][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.644136][ T51] [ 328.644136][ T51] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 328.652806][ T51] blk_alloc_queue+0x546/0x680 [ 328.658119][ T51] __blk_mq_alloc_disk+0x197/0x390 [ 328.663774][ T51] nbd_dev_add+0x499/0xb50 [ 328.668728][ T51] nbd_init+0x168/0x1f0 [ 328.673421][ T51] do_one_initcall+0x250/0x8d0 [ 328.678729][ T51] do_initcall_level+0x104/0x190 [ 328.684206][ T51] do_initcalls+0x59/0xa0 [ 328.689074][ T51] kernel_init_freeable+0x2a6/0x3e0 [ 328.694812][ T51] kernel_init+0x1d/0x1d0 [ 328.699681][ T51] ret_from_fork+0x51e/0xb90 [ 328.704809][ T51] ret_from_fork_asm+0x1a/0x30 [ 328.710121][ T51] [ 328.710121][ T51] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 328.717350][ T51] fs_reclaim_acquire+0x71/0x100 [ 328.722831][ T51] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 328.729174][ T51] __alloc_skb+0x1d0/0x7d0 [ 328.734153][ T51] tcp_stream_alloc_skb+0x3f/0x580 [ 328.739800][ T51] tcp_sendmsg_locked+0x1375/0x5480 [ 328.745617][ T51] tcp_sendmsg+0x2f/0x50 [ 328.750398][ T51] sock_write_iter+0x406/0x4f0 [ 328.755711][ T51] vfs_write+0x61d/0xb90 [ 328.760487][ T51] ksys_write+0x150/0x270 [ 328.765352][ T51] do_syscall_64+0x14d/0xf80 [ 328.770472][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.776892][ T51] [ 328.776892][ T51] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 328.784558][ T51] __lock_acquire+0x15a5/0x2cf0 [ 328.790042][ T51] lock_acquire+0xf0/0x2e0 [ 328.795016][ T51] lock_sock_nested+0x41/0x100 [ 328.800337][ T51] inet_shutdown+0x6a/0x390 [ 328.805396][ T51] nbd_mark_nsock_dead+0x2e9/0x560 [ 328.811062][ T51] recv_work+0x1c7f/0x1d90 [ 328.816023][ T51] process_scheduled_works+0xb6e/0x18c0 [ 328.822114][ T51] worker_thread+0xa53/0xfc0 [ 328.827245][ T51] kthread+0x388/0x470 [ 328.831851][ T51] ret_from_fork+0x51e/0xb90 [ 328.836986][ T51] ret_from_fork_asm+0x1a/0x30 [ 328.842295][ T51] [ 328.842295][ T51] other info that might help us debug this: [ 328.842295][ T51] [ 328.852536][ T51] Chain exists of: [ 328.852536][ T51] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 328.852536][ T51] [ 328.865176][ T51] Possible unsafe locking scenario: [ 328.865176][ T51] [ 328.872638][ T51] CPU0 CPU1 [ 328.878011][ T51] ---- ---- [ 328.883388][ T51] lock(&nsock->tx_lock); [ 328.887819][ T51] lock(&cmd->lock); [ 328.894336][ T51] lock(&nsock->tx_lock); [ 328.901287][ T51] lock(sk_lock-AF_INET); [ 328.905744][ T51] [ 328.905744][ T51] *** DEADLOCK *** [ 328.905744][ T51] [ 328.913916][ T51] 3 locks held by kworker/u9:0/51: [ 328.919064][ T51] #0: ffff8880270be948 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 328.930351][ T51] #1: ffffc90000bb7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 328.942130][ T51] #2: ffff8880787b5e70 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c6a/0x1d90 [ 328.951475][ T51] [ 328.951475][ T51] stack backtrace: [ 328.957380][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 328.957401][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.957413][ T51] Workqueue: nbd2-recv recv_work [ 328.957438][ T51] Call Trace: [ 328.957444][ T51] [ 328.957453][ T51] dump_stack_lvl+0xe8/0x150 [ 328.957478][ T51] print_circular_bug+0x2e1/0x300 [ 328.957508][ T51] check_noncircular+0x12e/0x150 [ 328.957537][ T51] __lock_acquire+0x15a5/0x2cf0 [ 328.957563][ T51] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 328.957590][ T51] ? try_to_wake_up+0x7fc/0x1390 [ 328.957613][ T51] lock_acquire+0xf0/0x2e0 [ 328.957636][ T51] ? inet_shutdown+0x6a/0x390 [ 328.957665][ T51] lock_sock_nested+0x41/0x100 [ 328.957684][ T51] ? inet_shutdown+0x6a/0x390 [ 328.957710][ T51] inet_shutdown+0x6a/0x390 [ 328.957736][ T51] nbd_mark_nsock_dead+0x2e9/0x560 [ 328.957773][ T51] recv_work+0x1c7f/0x1d90 [ 328.957794][ T51] ? __pfx_stack_trace_save+0x10/0x10 [ 328.957814][ T51] ? check_path+0x21/0x40 [ 328.957839][ T51] ? add_lock_to_list+0xc7/0x100 [ 328.957868][ T51] ? __pfx_recv_work+0x10/0x10 [ 328.957899][ T51] ? process_scheduled_works+0xa8d/0x18c0 [ 328.957921][ T51] ? process_scheduled_works+0xa8d/0x18c0 [ 328.957943][ T51] process_scheduled_works+0xb6e/0x18c0 [ 328.957976][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.958000][ T51] ? assign_work+0x3d5/0x5e0 [ 328.958023][ T51] worker_thread+0xa53/0xfc0 [ 328.958075][ T51] kthread+0x388/0x470 [ 328.958091][ T51] ? __pfx_worker_thread+0x10/0x10 [ 328.958114][ T51] ? __pfx_kthread+0x10/0x10 [ 328.958130][ T51] ret_from_fork+0x51e/0xb90 [ 328.958154][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 328.958175][ T51] ? __switch_to+0xc7d/0x1450 [ 328.958196][ T51] ? __pfx_kthread+0x10/0x10 [ 328.958212][ T51] ret_from_fork_asm+0x1a/0x30 [ 328.958244][ T51] [ 329.210218][T14622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2675'. [ 329.219506][T14622] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2675'. [ 329.229300][T14622] netlink: 'syz.0.2675': attribute type 5 has an invalid length. [ 329.237392][T14622] netlink: 'syz.0.2675': attribute type 6 has an invalid length. [ 329.245247][T14622] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2675'.